@Test public void returnsJsonArrayWhenUserHasMultipleSecrets() throws Exception {

  when(aclDAO.getSanitizedSecretsFor(client))
      .thenReturn(ImmutableSet.of(sanitizedFirstSecret, sanitizedSecondSecret));
  List<SecretDeliveryResponse> secrets = secretsDeliveryResource.getSecrets(client);
  assertThat(secrets).containsOnly(
      SecretDeliveryResponse.fromSanitizedSecret(SanitizedSecret.fromSecret(firstSecret)),
      SecretDeliveryResponse.fromSanitizedSecret(SanitizedSecret.fromSecret(secondSecret)));
}