aaa: return principal record only if success

Topic: AAA
Change-Id: I6d07f137ac7a51b1638ad31a66ff54d0a521f812
Signed-off-by: Alon Bar-Lev <alonbl@redhat.com>