Until we switch to storing krb5 principals in the database, we need to