Business scenario: The Company needs to make possible HTTP calls without using credentials, but just for one or a few clients, if other client calls this URL then credentials must be required.
Example: We have published Web Services in PI using SOAP and a consumer needs to call this web service but its policy uses only IP filters, the HTTP call of client is done using legacy systems.