'NT AUTHORITY\SYSTEM' is able to impersonate 'NT Service\MSSQLSERVER'. So i suppose that this is the trick...