I tried out specifying the compatible *unauthorized* private key / cert combo for `:ssl-cert` and `:ssl-key`.  Same test result as before, though -- `ProtocolException` thrown with nothing useful in the message.  I still think specifying the *unauthorized* private key for `:ssl-key` makes sense here even if it doesn't have any effect on what the test can validate.