SECURITY introduce member for overwritePrincipal with defaults