Just for completeness, how about if we do this as an additional test (when multiple usernames and passwords are configured) and keep the existing test for when just one user/pass are configured (I know that's actually a special case of this in a sense, but I think it's clearer to test the simple case and then the more complex one).