KMS should log full UGI principal

daryn reported that the kms-audit log only logs the short username:
OK[op=GENERATE_EEK, key=key1, user=hdfs, accessCount=4206, interval=10427ms]

In this example, it's impossible to tell which NN(s) requested EDEKs when they are all lumped together.