overwork user id handling reduce cases, where login is forced address problems, where auth::login forces a script abort and cunfuses a surrounding catch operations
new privileges for policies everybody (synonym for none), public (synonym for none), admin (swa or package_admin) registered_user (synonym for "login")