In the fediverse, you would use it as an object
reference. For example, a non-public post could have a bearcap
ID with a token.
This isn’t part of the idea at all, actually – it is just something that an implementation could do if it wanted. All a bearcap is a method for combining a URI with an access token. That’s it.