In section 3.8 Additional built-in beans
a bean with bean type javax.security.Principal, allowing injection of a Principal
representing the current caller identity.
javax.security.Principle should be java.security.Principal.
The same typo exists in CDI 1.0, 1.1 and 1.2.