can() is public, no need to access it through a reflection in tests