CloudFront & Flask: When signed URLs aren't enough | Hacker News Reader