Best workaround I've found is having an Active role and security level assigned to all active users, then requiring the role in the project's permissions.