This was

 - Added in dbf96e10.

 - Commented out in 07975979, which I
   believe only reached master by mistake.

 - Deleted in c32168c9, when
   `tests/build-hook-ca.nix` was reused for a new test.

But the test works, and we ought to have it.