`user` --> `principal`