@Test
public void matchesCanary_shouldReturnFalse_IfTheCanaryDoesNotDecryptToTheCanaryValue() throws Exception {

  when(encryptionProvider.decrypt(any(), any(), any())).thenReturn("garbage");
  subject = new ExternalKeyProxy(encryptionKeyMetadata, encryptionProvider);
  assertFalse(subject.matchesCanary(encryptionKeyCanary));
}