For local security realms (properties, keystores) we can list the available principals. Add an API:

GET /rest/v2/security/principals

which will return, if possible, a list of principals.