While stream security allows to protect files on Opencast distribution servers, there are situations where this is undesired. One often encountered use case is that people want to integrate a video into 3rd-party tools that don't support stream security (e.g. other video players like h5p).
By introducing an exclusion pattern, admins can configure Opencast to not sign specific URLs. Since the publication channel ID is part of the URL, this enables admins to disable stream security for specific publication channels, hence allowing unsafe publications.