docs: private IAuthorizationPrincipal getAuthorizationPrincipal(HttpServletRequest req) {
          IPerson user = personManager.getPerson(req);
          EntityIdentifier ei = user.getEntityIdentifier();
          IAuthorizationPrincipal rslt =
                  AuthorizationServiceFacade.instance().newPrincipal(ei.getKey(), ei.getType());
          return rslt;
      }