Interesting solution. Risky if the third party is granted access since they may observe the noonce value itself. But because no sane administrator should expose this interface to the general public, the solution seems sane.
httpd/httpd/branches/2.2.x/STATUS