Actually, I'd recommend initializing `principals` using `Collections.singletonList(SimplePrincipal.newInstance(username))`. The resulting list is immutable and an efficient implementation.