this.subject = lc.getSubject();
    }

    /**
     * Retrieves all Kerberos keys from the authenticated subject.
     *
     * @return array of KerberosKey objects
     */
    public KerberosKey[] getKeys() {
        List<Key> serverKeys = new ArrayList<>();

        Set<Object> serverPrivateCredentials = this.subject.getPrivateCredentials();
        for (Object credential : serverPrivateCredentials) {

        } catch (Exception e) {
            throw new RuntimeException(e);
        }
    }

    @Test
    @DisplayName("getters and basic state (happy path)")
    void testGettersAndState() {
        SmbSessionImpl session = newSession();

        // Basic getters
        assertSame(configuration, session.getConfig(), "getConfig delegates to transportContext");
        assertEquals("EXAMPLE", session.getTargetDomain());

            throw new RuntimeException("Failed to access protected fields via reflection", e);
        }

        // Since SamrOpenAlias's constructor parameters are not directly exposed via getters in MsrpcSamrOpenAlias,
        // we cannot directly verify them here without reflection or extending SamrOpenAlias for testing.

    void fakeImplementation_happyPath() {
        // Arrange
        FileEntry e = new TestFileEntry("doc.pdf", 2, 0x10, 10L, 20L, 30L, 4096L, 3);

        // Act & Assert: getters return exactly what was provided
        assertAll(() -> assertEquals("doc.pdf", e.getName()), () -> assertEquals(2, e.getType()),
                () -> assertEquals(0x10, e.getAttributes()), () -> assertEquals(10L, e.createTime()),

It's acceptable for implementation classes to be written to fit into existing code, but new classes must not instantiate managed properties or implement getters manually.

This is preferred:

```groovy
public interface NewThing {
    Property<String> getSomeProperty()
}
```

This is acceptable:

```groovy
public interface NewThing {

        // Current behavior of test impl: returns same reference
        assertSame(raw, t.toByteArray(), "should return the same reference as mechanismToken");
    }

    @Test
    @DisplayName("Setters accept null and getters return null")
    void settersAcceptNull() {
        TestSpnegoToken t = new TestSpnegoToken();
        t.setMechanismToken(null);
        t.setMechanismListMIC(null);

        // Act – serialise and parse back
        byte[] bytes = original.toByteArray();
        NegTokenTarg roundTrip = new NegTokenTarg(bytes);

        // Assert – all getters match the original values
        assertEquals(NegTokenTarg.ACCEPT_COMPLETED, roundTrip.getResult(), "result should roundtrip");
        assertEquals(mech, roundTrip.getMechanism(), "mechanism should roundtrip");

        assertArgumentNotNull("bundle", bundle);

        final Map<String, String> ret = newHashMap();
        for (final Enumeration<String> e = bundle.getKeys(); e.hasMoreElements();) {
            final String key = e.nextElement();
            final String value = bundle.getString(key);
            ret.put(key, value);
        }
        return ret;
    }

        if ((caps & Smb2Constants.SMB2_GLOBAL_CAP_ENCRYPTION) != 0)
            capCount++;

        assertEquals(expectedCapabilityCount, capCount);
    }

    @Test
    @DisplayName("Should handle all getters correctly")
    void testAllGetters() {
        // Given
        when(mockConfig.getMaximumVersion()).thenReturn(DialectVersion.SMB311);
        when(mockConfig.isEncryptionEnabled()).thenReturn(true);

    }

    @Nested
    @DisplayName("Getter Tests")
    class GetterTests {

        @Test
        @DisplayName("Should return correct values from getters")
        void testGetters() throws CIFSException {
            // When/Then: All getters should return expected values
            assertEquals(mockBinding, handle.getBinding());
            assertTrue(handle.getMaxRecv() > 0);