If set this allows the request headers to be changed. Must not be set in response to an authChallenge.