Describe on how a backend system might request payload/sensitive data for a given identity. - [ ] Simple example for one time requests - [ ] Extended example for best practice (always request "on demand")