(maint) Fix external ca acceptance test

Without this patch it runs against systems that it shouldn't run
against.  This is because I misunderstood the confine method.