Programatically getting the subject needed to generate the mock system metadata instead of having to hard-code it everywhere. Avoided using ClientIdentityManager.getCurrentIdentity() because it would introduce a sneaky state out-of-sync bug with the certificate location.
(detail)
by andreib