assertEquals(expected, auth.isPreferredMech(oid));
    }

    @Test
    @DisplayName("Accessors: user/realm/service and lifetimes")
    void accessors_workAsExpected() {
        Kerb5Authenticator auth = new Kerb5Authenticator((Subject) null);

        // User accessors
        assertNull(auth.getUser());
        auth.setUser(null);
        assertNull(auth.getUser());