anchor.diff:      [
        {"properly formed",
         fun() ->
  -              {ok, KeyBin} = file:read_file("../test/akey.pem"),
  -              PrivateKey = chef_authn:extract_private_key(KeyBin),
  -              Time = httpd_util:rfc1123_date(),
  -              Path = "does-not-matter-comes-from-meck-mocks",
  -              SignedHeadersBin =
  -                  chef_authn:sign_request(PrivateKey, <<"alice">>, <<"GET">>, Time, Path),
  +              SignedHeadersBin = get_signed_headers(),
                 meck:expect(wrq, get_req_header,
                             fun(HName, _Req) -> proplists:get_value(HName, SignedHeadersBin) end),
                 meck:expect(wrq, path_info, fun(object_type, _Req) -> "node" end),
  
positive.code: 
       {"time out of bounds",
        fun() ->
                {ok, KeyBin} = file:read_file("../test/akey.pem"),
                PrivateKey = chef_authn:extract_private_key(KeyBin),
                Time = httpd_util:rfc1123_date(),
                Path = "does-not-matter-comes-from-meck-mocks",
                SignedHeadersBin =
                    chef_authn:sign_request(PrivateKey, <<"alice">>, <<"GET">>, Time, Path),
                SignedHeadersBin1 = lists:keyreplace(<<"X-Ops-Timestamp">>, 1, SignedHeadersBin,
                                                     {<<"X-Ops-Timestamp">>, <<"2011-06-21T19:06:35Z">>}),
                meck:expect(wrq, get_req_header,
  
negative.code: 
      ]}.
  
  get_signed_headers() ->
      {ok, KeyBin} = file:read_file("../test/akey.pem"),
      PrivateKey = chef_authn:extract_private_key(KeyBin),
      Time = httpd_util:rfc1123_date(),
      Path = "does-not-matter-comes-from-meck-mocks",
      chef_authn:sign_request(PrivateKey, <<"alice">>, <<"GET">>, Time, Path).
  
  
  all_auth_headers() ->
      [
  