Similar to #36 but will need more security tightening (e.g. limiting caching to 30 minutes maximum or something)
