same logic when clone --noop private repos. Fixes #593

This line reads well but technically doesn't assert anything. The `"cmd" should not be run` step only asserts that the literal command `cmd` was not run, but this match isn't partial. So if `git clone git@...` was indeed run against our expectations, this assertion would still pass.