diff --git a/test/puppetlabs/trapperkeeper/authorization/ring_middleware_test.clj b/test/puppetlabs/trapperkeeper/authorization/ring_middleware_test.clj
index 50908490..2341640b 100644
--- a/test/puppetlabs/trapperkeeper/authorization/ring_middleware_test.clj
+++ b/test/puppetlabs/trapperkeeper/authorization/ring_middleware_test.clj
@@ -185,8 +185,9 @@
                                        :get "127.0.0.1"
                                        testutils/test-denied-cert))]
            (is (= 403 (:status response)))
-            (is  = (str "Forbidden request: /path/to/foo (method :get)."
-                       " Please see the server logs for details.")))))
+           (is (= (str "Forbidden request: /path/to/foo (method :get)."
+                       " Please see the server logs for details.")
+                  (:body response))))))
      (testing "access denied when deny all"
        (let [app (build-ring-handler [(-> (testutils/new-rule :path "/")
                                           (rules/deny {:certname "*"}))]
diff --git a/test/puppetlabs/trapperkeeper/services/authorization/authorization_core_test.clj b/test/puppetlabs/trapperkeeper/services/authorization/authorization_core_test.clj
index 1153514b..8e6e089f 100644
--- a/test/puppetlabs/trapperkeeper/services/authorization/authorization_core_test.clj
+++ b/test/puppetlabs/trapperkeeper/services/authorization/authorization_core_test.clj
@@ -107,6 +107,7 @@
     (is (thrown-with-msg?
           IllegalArgumentException
           #"An authorization rule should be specified as a map."
+          #_{:clj-kondo/ignore [:type-mismatch]}
           (validate-auth-config-rule! 0)))
 
     (is (thrown-with-msg?