I'm fairly certain that if you have more than one principal that you want to have separate passwords. I agree with you that more than one principal alias should be able to live on the same object. --Sam