I believe the answer is: Ensure that the generic user has not been assigned to a role.
By not signing roles, the universal containers could freely set up the rules without risking up their overall performance. If they do not use this, the time and cost needed to re-integrate the two million records may not be sustainable by the company.