Allows a client to request a credential for a backup-id without revealing the backup-id to the issuing server. Later, the client may use this to make requests for the backup-id without identifying themselves to the server.