Move the "principals" declaration down towards line 126.

The idea being that it does not need to be initialized if "roleNames" is null.