How does a client authenticate itself for validate

There is an authentication_info field in the validate messages, but what does a client need to put in there? And is it even required, e.g. if the client had a secret key, she could sign the validate message. We need to specifiy something here.
