The SimulatePrincipalPolicy is included as a base permission, required for all installs. But this permission should only be needed if the Permissions check is run, which only occurs when CredentialsMode == "". Therefore, SimulatePrincipalPolicy should be indicated as an optional permission. 

This is relevant because sometimes SCP policies may break this permission/functionality. 

    1. remove SimulatePrincipalPolicy from permissions
    2. set CredentialsMode (to anything except "", Mint is fine)
    3. Start install
    

    Install should work

    According to our docs, this install should fail, because SimulatePrincipalPolicy is required for everything. If CredentialsMode is set to "" (and the SimulatePrincipalPolicy permission is removed) then I would expect the installer to fail.