We use the PolicyContext api to get the active subject. In a stand alone environment, this is not valid. If we are unable to get the active subject via the policy context api, rather than throwing a RTE, we should log the error and move on to accept the active subject from the SecurityContext.