But then you end up potentially exposing the origin server. This could be an opt-in option though