public Object verifyCredentials()
      throws AuthenticationRequiredException, AuthenticationFailedException {

    String methodName = system.getProperties().getProperty(SECURITY_CLIENT_AUTHENTICATOR);
    return verifyCredentials(methodName, credentials, system.getSecurityProperties(),
        (InternalLogWriter) system.getLogWriter(),
        (InternalLogWriter) system.getSecurityLogWriter(), id.getDistributedMember(),
        securityService);
  }
this could return either a Subject or a Principal depending on if it's integrated security or
not
geode-core/src/main/java/org/apache/geode/internal/cache/tier/sockets/Handshake.java