Currently the only realm that supports principal name rewriting is the LDAP realm.
It would be useful to implement this also for other realms, such as the Trust-store realm, to allow extraction of a principal name from the identity