@Test
public void shouldFailToGetProjectFromIAM() throws IOException {

  doThrow(new IOException()).when(serviceAccountsGet).execute();
  idTokenPayload.setEmail("foo@developer.gserviceaccount.com");
  assertThat(validator.authenticate("token"), is(nullValue()));
  verify(serviceAccountsGet, times(3)).execute();
  verifyZeroInteractions(projectsGetAncestry);
}