Make it clear that this test does not expect an authentication failure
Certificate authencation needs to be enabled explicitly, as with STOMP

Using the same ssl_cert_login app key.