...
If the object of an acl:agent statement looks like a URI, these properties are used to strip off the base part of that URI, leaving a simple string username.
Example
Fedora is started with -Dfcrepo.auth.webac.userAgent.baseUri=http://example.com/users/
...