The article tries to argue from the Angle of distrust that we should build up a new limitedtrust mechanism and emphasize reasonable distrust while establishing necessary trust.
This model assumes that there is only limitedtrust of the ESB by a provider service, which requires credentials which allow the provider to authenticate the initiator of the request directly.