anchor.diff:      ?assertMatch({ok, "401", _, _}, ibrowse:send_req(Loc, [], get, [], [UnknownCertOpt])),
   
       % then - authorized access
  -%%     ct:print("~p", [utils:cmd(["curl", "-k", "--cert", CertKnown, "-L", "-v","-H", "'content-type: application/json'", "-X", "PUT", Endpoint ++ "random_path?aa=bb"])]).
       {ok, "307", Headers2, _} = ibrowse:send_req(Endpoint ++ "random_path", [], get, [], [KnownCertOpt]),
       Loc2 = proplists:get_value("location", Headers2),
       {ok, "307", Headers3, _} = ibrowse:send_req(Loc2, [], get, [], [KnownCertOpt]),
  
positive.code:         end
      ).
  
  %todo move to ctool
  unmock_gr_certificates(Config) ->
      Workers = ?config(op_worker_nodes, Config),
      test_utils:mock_validate(Workers, [gr_endpoint]),
  
negative.code:         end,
      string:join(["https://", utils:get_host(Node), ":", Port, "/rest/latest/"], "").
  
  mock_gr_certificates(Config) ->
      [Worker1, _] = Workers = ?config(op_worker_nodes, Config),
      Url = rpc:call(Worker1, gr_plugin, get_gr_url, []),
  