public ConnectionAuthContext authorizePeer(X509Certificate cert) { return authorizePeer(List.of(cert)); }
@Test
    void can_match_subset_of_policies() {
        PeerAuthorizer peerAuthorizer = createPeerAuthorizer(
                createPolicy(POLICY_1, createRequiredCredential(CN, "*.matching.cn")),
                createPolicy(POLICY_2, createRequiredCredential(SAN_DNS, "*.matching.san")));

        ConnectionAuthContext result = peerAuthorizer.authorizePeer(createCertificate("foo.invalid.cn", List.of("foo.matching.san"), List.of()));
        assertAuthorized(result);
        assertThat(result.matchedPolicies()).containsOnly(POLICY_2);
    }