Change in ovirt-engine[master]: aaa: return principal record only if success