Allow private image url