anchor.diff:                  topic="$SYS/#",
                   port=${toString tlsPort},
                   user="no_such_user"))
  -
  -    check_tls()
     '';
   })
  
positive.code:             ])
  
          parallel(
              lambda: client1.fail(subscribe("-W 5 -i 24ff16a2-ae33-4a51-9098-1b417153c712", "reader")),
              lambda: [
                  server.wait_for_console_text("24ff16a2-ae33-4a51-9098-1b417153c712"),
                  client2.succeed(publish("-m test", "reader"))
              ])
  
      check_acl()
  
      def check_tls():
          client1.succeed(
              subscribe(
                  "--cafile ${snakeOil}/ca.crt "
  
negative.code:     def publish(args, user, topic="${topic}", port=${toString port}):
          return "{} {}".format(mosquitto_cmd("pub", user, topic, port), args)
  
      def subscribe(args, user, topic="${topic}", port=${toString port}):
          return "{} -W 5 -C 1 {}".format(mosquitto_cmd("sub", user, topic, port), args)
  
      def parallel(*fns):
          from threading import Thread
  