@Test(expected = ForbiddenException.class)
public void returnsUnauthorizedWhenDenied() throws Exception {

    when(aclDAO.getBatchSanitizedSecretsFor(client, ImmutableList.of(secret.getName()))).thenReturn(ImmutableList.<SanitizedSecret>of());
    when(clientDAO.getClientByName(client.getName())).thenReturn(Optional.of(client));
    when(secretController.getSecretsByName(ImmutableList.of(secret.getName())))
            .thenReturn(ImmutableList.<Secret>of(secret));
    batchSecretDeliveryResource.getBatchSecret(client, BatchSecretRequest.create(ImmutableList.of(secret.getName())));
}