If you are exposing the mt-add-notify.cgi interface to users, allowing them to sign up for site update notifications, you should set this value to something that outsiders would not be able to guess. This allows Movable Type to secure the notification signup process so that visitors have to verify their email addresses.