I think this test should also set the `:ssl-key` to that of the unauthorized certificate's private key so that we don't fail because of an SSL protocol violation -- incompatible key for cert.