This replaces the OverridePermissions method, and is communicated
to clients that can reliably and safely identify a system user.