[03:38:21] the sec-warning redirect should happen even if the request would otherwise be a cache hit right?