AggregateRealmEvidenceTest has a test that currently tests the case where authorization succeeds with a principal transformer:

https://github.com/wildfly-security/wildfly-elytron/blob/2.x/auth/realm/base/src/test/java/org/wildfly/security/auth/realm/AggregateRealmEvidenceTest.java#L180-L196

Add a similar test case but for the case where authorization fails.