I have an idea - it would be great to have an "ask" function that can call an API endpoint and verify whether a file is authorized to be displayed.