Using Envoy's internal redirect for fun, glory and authentication

We have assets in object storage, but we don't want to let the whole internet in. Our backend can authenticate but would cry if it had to serve assets all day. read more