Some improvements to anonymous context, caller must switch realm if this is required. Anonymous always starts in system realm.