system users should not create user workspaces

When using multi-tenant add-on, the tenant id is not propagated to the system principal. If in a unrestricted session runner, someone is getting access to UserWorkspace, a new user workspace is created in the default tenant.

That put in troubles some logic that makes the assumption a user should have only one user workspace.