If the policy file contains an entry such as

 grant principal principalClass "${principalName}" {
...
}

And the property 'principalName' is not defined, then this entry appears
to be interpreted as:

grant principal principalClass * {
...
}