Describe how special users are handled in the config for the User Operator, such as User:ANONYMOUS or User:*.

When UO is enabled because it would delete the ACL rules as a rules for non-existent user. At the same time, the UO cannot manage these rules because ANONYMOUS and * are not valid Kubernetes names.