It might be worth adding some documentation here explaining that this will only be called when the app server needs to download a file from the storage back-end and indicate that an end-user downloading a file will not go through this.