verify all mocks explicitly - necessary in some cases, so let's just do it; cruft
ec2 credentials collection spec
collection specs do not require this expectation
DRY up usage of the admin options hash