@Test
public void matchesCanary_shouldReturnFalse_IfTheInternalKeyWasWrong() throws Exception {

  when(encryptionProvider.decrypt(any(), any(), any())).thenThrow(AEADBadTagException.class);
  subject = new ExternalKeyProxy(encryptionKeyMetadata, encryptionProvider);
  assertFalse(subject.matchesCanary(encryptionKeyCanary));
}