improve ejbca un-happy path