s3:gse: We need to use the users realm in the target_principal