auth: Allow a NULL principal to be obtained from the credentials