An authenticated Datasette I run is seeing delays on every page load. On looking at the network inspector it turns out it's because datasette-vega is nearly 1MB and a cache-control: private is preventing it from being cached!

This may well turn out to be a bug in datasette-auth-github but it's still worth tracking here because caching of static assets from plugins is very important.