docs: protected IAuthorizationPrincipal getPrincipalForUser(final IPerson person) {
          final EntityIdentifier ei = person.getEntityIdentifier();
          return AuthorizationServiceFacade.instance().newPrincipal(ei.getKey(), ei.getType());
      }