@Test
    void resourceWithDenyAllAndAuth403() {
        Invocation.Builder request = target("/test/denied").request()
            .header(HttpHeaders.AUTHORIZATION, getPrefix() + " " + getGoodGuyValidToken());
        assertThatExceptionOfType(WebApplicationException.class)