Some mechanisms make use of this to verify the server and may require an override.

As an example for Kerberos a server would commonly have an identity HTTP/server-name.

Whilst an administrator may be able to map this to REMOTE+HTTP/server-name they may prefer to override the SASL mechanisms expectation and set protocol to HTTP.