@Override
    public void validate(Context context) {
        if (!context.deployState().isHosted()) return;
        if (!context.deployState().zone().system().isPublic()) return;

        validateUniqueCertificates(context);
    }
@Test
    void validator_accepts_distinct_client_certificates() throws IOException, SAXException {
        String certFile1 = "security/foo.pem";
        String certFile2 = "security/bar.pem";
        String servicesXml = """
                        <services version='1.0'>
                          <container version='1.0'>
                            <clients>
                              <client id="a" permissions="read,write">
                                <certificate file="%s"/>
                              </client>
                              <client id="b" permissions="read,write">
                                <certificate file="%s"/>
                              </client>
                            </clients>
                          </container>
                        </services>
                """.formatted(certFile1, certFile2);

        DeployState deployState = createDeployState(servicesXml,
                                                    Map.of(
                                                            certFile1, List.of(createCertificate("foo")),
                                                            certFile2, List.of(createCertificate("bar"))));

        VespaModel model = new VespaModel(new NullConfigModelRegistry(), deployState);
        ValidationTester.validate(new CloudDataPlaneFilterValidator(), model, deployState);
    }