add check for 'principal is x with credentials' property should be marked as (id) property