This is part of the REST Authentication Spec. The REST plugin needs to communicate to Seraph that for /rest/ URLs a default os_authType of "any" should be used. This requires Seraph 2.2. to understand it. If you're not using Seraph 2.2 it shouldn't have any effect.