private void checkIfAuthenticWanSite(DataInputStream dis, DataOutputStream dos,
      DistributedMember member) throws GemFireSecurityException, IOException {

    if (credentials == null) {
      return;
    }
    String authenticator = system.getProperties().getProperty(SECURITY_CLIENT_AUTHENTICATOR);
    Properties peerWanProps = readCredentials(dis, dos, system, securityService);
    verifyCredentials(authenticator, peerWanProps, system.getSecurityProperties(),
        (InternalLogWriter) system.getLogWriter(),
        (InternalLogWriter) system.getSecurityLogWriter(), member, securityService);
  }
this could return either a Subject or a Principal depending on if it's integrated security or
not
geode-core/src/main/java/org/apache/geode/internal/cache/tier/sockets/Handshake.java