Short Update to my previous post about this:
Setting the AuthenticationScheme to NTLM means that the user of the host instance is sending the message to the destination. In case of a dynamic port there is no host specified - BizTalk then automatically executes the dynamic Send Port under the standard host user. (for example BizTalk Server Application)