None
The customer needs this option for backend health check monitoring of AAP clusters without authentication against AAP.
Side question "Is there a reason why this is protected to begin with?"