As long as the cache has a response with a zookie as fresh or fresher, you can use that to safely check a permission