Ah, something else that just occurred to me.  The test is redefining the `:ssl-cert` but not the `:ssl-key`.  Since we'd be using the wrong private key with the cert that is configured, I could see where a "protocol" violation could occur.  Wonder if we use the right private key for *unauthorized* if we would get a more useful `Exception`?