This is now no longer under a lock when called from EncryptedBlobCache's `BeforeWriteToDiskFilter`