- Make HTTP request headers accessible during policy execution - Accept HTTP header to specify TTL cache for policy result