Is it ever possible to have a principle that is not authenticated but does have a name? e.g. when using an anonymous user identification module? (User has a name but wasn't actually authenticated by anybody). Even in that case, does it matter?