dotted principal names can be used with -allow-dotted-principals