Exposed the authenticated principal through Authenticator::authenticate() result.

Review: https://reviews.apache.org/r/21665