fetch principal explicitly during verify instead of implicit dereference