I've actually done that for (what I consider to be) a good reason: access controls on objects accessible via SOAP::Lite.

In this case, I build a proxy object. All of my accessable methods had sub attributes that gave the permissions they needed and I added authentication tokens used to identify users through sessions.

More details in my journal.