[Freeswitch-users] Conflicting settings in SIP profile in vanilla demo

I am working with a simple FreeSWITCH installation, with the vanilla demo configuration. I see that the Internal SIP profile contains: <param name="apply-inbound-acl" value="domains"/> <param name="auth-calls" value="$${internal_auth_calls}"/> The first line means that if a caller's IP is on the 'domains' list that they do NOT need to authenticate. The second line means that in order to use this SIP profile the user MUST be authenticated (internal_auth_calls is true). Aren't these two lines contradictory? Why allow a user to not authenticate for this SIP profile, and then say they must authenticate to use this SIP profile?