I've run into these before, on a site run by DataBricks. If you've never tried them, then you need to believe OP: There is something deeply broken about them. I suspect they're only used when the company doesn't want you to access the resource they're protecting.