@Test(expected = NotAuthorizedException.class)
public void rejectsCertMatchingMultipleClients() {

  ApiDate now = ApiDate.now();
  Client otherClient =
      new Client(2345L, "other-client", "desc", null, now, "automatic", now, "automatic",
          null, null, true, false
      );
  when(clientDAO.getClientByName(clientName)).thenReturn(Optional.of(client));
  when(clientDAO.getClientBySpiffeId(clientSpiffe)).thenReturn(Optional.of(otherClient));
  authenticator.authenticate(certPrincipal, true);
}