I think having an anonymous user subsite parameter would do it. If it's set then that user is the anonymous user for that subsite, if not then there is not one. If the subsite could take care of "logging" you in as that user then the other packages would not need to change.
