Allows you to secure every invocation (especially useful for web request URI security) by always having either an actual principal or an anonymous principal authenticated.