Instinctively I would say, to have a direct authentication/authorization process you couldn't have if the client was communicating directly with a MQ.