Oh, I didn't read your comment well, you're suggesting PrincipalsUtil, not AuthzUtil. Yea I'll have a look at that.