Some brokers already expect to receive a X-Broker-API-Originating-Identity HTTP header on nearly every operation. At the moment the framework doesn't make it too easy to specify this in tests. More functionality for this (and maybe arbitrary HTTP headers?) would be good.