tests for DD filter access for with client-auth