Also validate ```$realm_principal```?