Description
In the service definition xml, when
<policy role="authentication" name="Anonymous"/>
is defined, AnonymousAuthFilter should be added to the filter chain, this causes NPE in cases where authorization plugin like XASecurePDPKnox is expecting anonymous subject.
This only happens when there is no "authentication" provider in the topology.