right, but can't we simply override `saveAuthAssignment()`, delete the cache key and call the parent implementation? that way we can cache for longer periods safely