061c028 Fixes #21867: Validate groups and principals after considering all inputs (#22101)