Ref check is permissible on any enforced URL.