I'm not familiar with sp_helptext but I did grab the mssqlsystemresouce database and look at the source for sys.server_principals and saw where they're restricting (using the function has_access) what rows are returned. Unfortunately, I can't directly query the underlying table/view on which server_principals is based.

How are other people doing this kind of SOX access review?