work on different mechanisms of accessing the currently authenticated principal