I think the test does that already, because of `assert ctxFactory is fakeCtxFactory`; the only place that comes from is a mocked out `CertificateOptions`.