We don't have to have thumbnail serving reflect access controls correct?