Probably, as previously EVERYONE would be passed as the user principal to the PEP if there was no user principal in the credentials.