@Test public void handlesNoAssociations() {

  when(clientDAO.getClientById(1)).thenReturn(Optional.of(client));
  when(aclDAO.getGroupsFor(client)).thenReturn(Collections.emptySet());
  when(aclDAO.getSanitizedSecretsFor(client)).thenReturn(ImmutableSet.of());
  ClientDetailResponse response = resource.getClient(user, new LongParam("1"));
  assertThat(response.groups).isEmpty();
  assertThat(response.secrets).isEmpty();
}