assertEquals("_a_", ldapManager.replaceWithUnderscores("/a/"));
        assertEquals("___", ldapManager.replaceWithUnderscores("///"));
        assertEquals("a_a", ldapManager.replaceWithUnderscores("a/a"));
    }

    public void test_allowEmptyGroupAndRole() {
        final AtomicBoolean allowEmptyPermission = new AtomicBoolean();

		invalidCharFound bool
	}{
		{unescaped: "a.a", canSkip: false},
		{unescaped: "a-a", canSkip: false},
		{unescaped: "a__a", canSkip: false},
		{unescaped: "a.-/__a", canSkip: false},
		{unescaped: "a_a", canSkip: true},
		{unescaped: "a_a_a", canSkip: true},
		{unescaped: "@", invalidCharFound: true},
		{unescaped: "👑", invalidCharFound: true},
		// if escape keyword is detected before invalid character, invalidCharFound

			t.Errorf("expected errors for %q", val)
		}
	}
}

func TestIsRelaxedEnvVarName(t *testing.T) {
	goodValues := []string{
		"-", ":", "_", "+a", ">a", "<a",
		"a.", "a..", "*a", "%a", "?a",
		"a:a", "a_a", "aAz", "~a", "|a",
		"a0a", "a9", "/a", "a ", "#a",
		"0a", "0 a", "'a", "(a", "@a",
	}
	for _, val := range goodValues {
		if msgs := IsRelaxedEnvVarName(val); len(msgs) != 0 {