You should probably assert that `$authorize->getAcl() === $acl` (the mocked one)