That doesn't seem to be common practice. Externally, Resin sends no-cache directives even for the anonymous logins. Otherwise, if the expires time is 15 minutes, and a user logs in, she'll still see the old anonymous page. The glaring omission is dealing with user tracking cookies. That's a fix from b6 to the latest snapshot.
Cache control is now very limited.
If you have specific ideas or feature requests, send them over. It might be a better fit.