Disagree. If the admin chooses to remove the Anonymous role from a user, it should not be returned behind the scenes. Or does the RBAC design require every user have Anonymous? (Can I get a link to the design doc please?)