At the moment, org.zanata.rest.helper.RemoteTestSignaler (arquillian test) and org.zanata.rest.SampleProjectResource (functional test) uses /test/ path to setup test data. At that point there is no valid username/apiKey exists in database yet. If we supply a fake one, it will fail org.zanata.rest.ZanataRestSecurityInterceptor. (after reviewing this class, maybe I can just supply a fake apiKey without username) I will have to try it.