The policy enforcement that prevents issuing for *.example.com when highvalue.exampel.com is on the exact hostname policy in #3318 only has unit tests. We should additionally test this code at the integration test layer.

Landing an integration test requires wildcard issuance which requires DNS-01 validation which is blocked on #3312 :-)