Refs #3695: store API principals in LDAP
Change Principal to account, more frequently used