Granted, it's more work for you, but this is pretty straight-forward to do with with access_by_lua (and the associated nginx APIs).