CKM: access control tests use more descriptive error reporting

No match.