We would for instance use this to make calls to VisualCron from our end-user portal. We don't do manual 😉. The credentials would be stored in a secure way and passed as parameters to the REST call.
Also we would use it via powershell with invoke-webrequest and a credential object as a parameter.