Java Security Principal Definition