//Custom check: Check that the source of the response and the recipient
// of the response have identical credentials
Set sourceSet = source.getPrincipals(SimplePrincipal.class);
Set recipientSet = recipient.getPrincipals(SimplePrincipal.class);
if(sourceSet == null && recipientSet == null)
throw new AuthException("Principals are null");
if(sourceSet.size() != recipientSet.size())
throw new AuthException("Principals size are different");
return AuthStatus.SUCCESS;
}