The authorization header can interfere with caching because npmjs doesn’t return “public” in the “Cache-Control” header.