Move IPrincipalUser to security-package