@Test
public void shouldFailToGetProject() throws IOException {

  doThrow(new IOException()).when(projectsGetAncestry).execute();
  idTokenPayload.setEmail("foo@barfoo.iam.gserviceaccount.com");
  assertThat(validator.authenticate("token"), is(nullValue()));
  verifyZeroInteractions(iam);
  verify(projectsGetAncestry, times(3)).execute();
}