I'm not really sure, this just came from the mediacore Java. I think it allows you to say the signature is only valid if it originates from a certain set of IPs. None of the code they've sent me has used it though and the Java implementation is the only doc I've seen for the signing api.