system_user and anonymous_user should be excluded from
auto_setup_new_user, always.

refs #4383