flisk:only-fetch-when-authenticated
develop
always doing these fetches regardless of whether they'll reasonably succeed is silly and causes a bunch of spurious 403's, which end up as noise in the server logs. instead, let's not do that.