An entity that can obtain a ticket and that is identified by a principal
This entity is usually either: