The principal (even if an authority selector is present), which must only be used for attribution, not authorization.