To retrieve sys/info anonymously, both the new VIEW-SYSTEM and remote api permissions were needed, but, allowing anonymous to use remote api w/o also having data and other permissions causes the dashboard/discovery apps to show partial info and fail w/o allowing people to login. A simple immediate fix is to make sys/info an independent permission. Longer term, we may want to revisit permissions to make them more orthogonal or to allow a remote app to assure that all necessary permissions are granted before trying to show content.