if (principal.picture.largeUri) {
    principal.picture.large = ContentUtil.getSignedDownloadUrl(ctx, principal.picture.largeUri, duration, offset);
    delete principal.picture.largeUri;
  }