Valid question. I think the authenticated URL is always the public URL + some query parameters, in which case the answer would me yes. It's worth writing a test for it.