We need to allow clients to wire up different principal resolvers based on which authentication handler succeeds. I think I provided a more thorough answer in a previous comment.

This attribute is in the abstract class since both concrete implementations use it.