SecurityInterceptor: Use unauthenticatedIdentity if explicit RunAsPrincipal not configured

In the setContainer method of the SecurityInterceptor, there is a need to create a RunAsIdentity instance. If there is no explicit run-as principal configured for a run-as role, then use the container unauthenticatedIdentity, starting with the Applicationmetadata.getUnauthenticatedprincipal.