@Test public void rejectsDisabledClients() {

  Client disabledClient =
      new Client(1, "disabled", null, null, null, null, null, null, null, null,
          false, false
          /* disabled */);
  when(clientDAO.getClientByName("disabled")).thenReturn(Optional.of(disabledClient));
  assertThat(authenticator.authenticate(SimplePrincipal.of("CN=disabled"), true)).isEmpty();
}