allow set principal from child services