Also no `/foreman.example.com` required in the principal