}
    }

    public void test_toSlackMessage_withBasicContent() {
        MockSMailPostingDiscloser discloser = new MockSMailPostingDiscloser();
        discloser.setSubject("Test Subject");
        discloser.setPlainText("Test Content");

        String result = notificationHelper.toSlackMessage(discloser);

        assertNotNull(result);

            assertSame(copySubj, copy.getSubject(), "Clone should retain its cached Subject");
        } else {
            // If JAAS is not configured and getSubject() returns null, verify cloning still works
            assertNull(first, "First call to getSubject() returned null - JAAS not configured");

            // Clone should also return null for getSubject() calls
            Subject copySubj = copy.getSubject();

        }
    }

    @Test
    @DisplayName("Protected setSubject: updates subject used by getters")
    void setSubject_updatesSubject() {
        Kerb5Authenticator auth = new Kerb5Authenticator((Subject) null);
        assertNull(auth.getSubject());
        Subject subject = new Subject();
        auth.setSubject(subject);
        assertSame(subject, auth.getSubject());
    }

    /**
     * {@inheritDoc}
     *
     * @see java.lang.Object#toString()
     */
    @Override
    public String toString() {
        return "Kerb5Authenticator[subject=" + (this.getSubject() != null ? this.getSubject().getPrincipals() : null) + ",user=" + this.user
                + ",realm=" + this.realm + "]";
    }

        // setObject should handle various inputs
        try {
            WebApiUtil.setObject("validKey", "validValue");
            WebApiUtil.setObject("", "emptyKey");
            WebApiUtil.setObject("nullValue", null);
            WebApiUtil.setObject(null, "nullKey");
            WebApiUtil.setObject(null, null);
        } catch (Exception e) {

            when(mock.getSubject()).thenReturn(subject);
            doNothing().when(mock).login();
        })) {
            KerberosCredentials credentials = new KerberosCredentials(LOGIN_CONTEXT_NAME);
            assertNotNull(credentials.getSubject());
            assertEquals(subject, credentials.getSubject());
        }
    }

    /**
     * Test constructor when login fails.

    }

    @Nested
    @DisplayName("getSubject edge cases")
    class SubjectTests {
        @Test
        @DisplayName("returns provided subject")
        void subject_non_null() {
            Subject s = new Subject();
            TestCredentials creds = new TestCredentials("X", false, false, s, false);
            assertSame(s, creds.getSubject());
        }

        @Test

        this.cachedSubject = null;
    }

    @Override
    public synchronized Subject getSubject() {
        if (this.cachedSubject != null) {
            return this.cachedSubject;
        }

        try {
            log.debug("Logging on");
            LoginContext lc;

            Subject ps = super.getSubject();

            if (this.configuration != null) {

     */
    public KerberosCredentials(String loginContextName) throws LoginException {
        LoginContext lc = new LoginContext(loginContextName);
        lc.login();
        this.subject = lc.getSubject();
    }

    /**
     * Retrieves all Kerberos keys from the authenticated subject.
     *
     * @return array of KerberosKey objects
     */
    public KerberosKey[] getKeys() {

		healingLogIf(ctx, fmt.Errorf("unexpected tracker healing start time found: %v", started))
		started = time.Time{}
	}

	// Final tracer update before quitting
	defer func() {
		tracker.setObject("")
		tracker.setBucket("")
		healingLogIf(ctx, tracker.update(ctx))
	}()

	for _, bucket := range healBuckets {
		if err := bgSeq.healBucket(objAPI, bucket, true); err != nil {