diff --git a/modules/claude-licence-manager/cmd/claude-licence-manager/store_test.go b/modules/claude-licence-manager/cmd/claude-licence-manager/store_test.go
index 957fdbfd..30182eeb 100644
--- a/modules/claude-licence-manager/cmd/claude-licence-manager/store_test.go
+++ b/modules/claude-licence-manager/cmd/claude-licence-manager/store_test.go
@@ -110,7 +110,8 @@ func TestAGrantAtRestOpensOnlyWithItsKey(t *testing.T) {
 	a, _ := NewCrypt("one key")
 	b, _ := NewCrypt("another key")
 	sealed := a.Seal(`{"refreshToken":"rt"}`)
-	if strings.Contains(sealed, "rt") {
+	// The plaintext's own words, not two letters a random ciphertext holds one time in about seventy.
+	if strings.Contains(sealed, "refreshToken") {
 		t.Fatal("stored in the clear")
 	}
 	if got, err := a.Open(sealed); err != nil || got != `{"refreshToken":"rt"}` {