s4:auth/credentials: pass 'self_service' to cli_credentials_set_impersonate_principal()