Add a callout point in HttpConnection::recordParameters
The RBAC (#1263 (closed)) role assignment can be extended using the custom value, a free member of HTTP request objects which comes with remote address, certification subject and issuer name, etc. The idea is to prepend a dedicated hook at the auth callout point which for instance implements 'you need a TLS cert AND you need to connect from specific IP' by setting a custom value and configure RBAC to assign the role from it.
Now at the auth callout point all available informations are in the HTTP request object. This can be enough or not. The idea in this ticket is to get more information from the HttpConnection object including the Transaction sub-object. Perhaps it is an illusion as for instance TLS details are not available mainly because the TLS socket depends on the crypto backend...
So I propose to wait for a concrete customer request which can be only solved by such new callout point.