@Test(expected = NotFoundException.class)
public void badIdNotFound() {

  when(secretController.getSecretById(0xbad1d)).thenReturn(Optional.empty());
  resource.retrieveSecret(user, new LongParam(Long.toString(0xbad1d)));
}