For that matter, non-anonymous objects can then also be serialized as well - since the URLs are signed we don't need to worry too much about tampering