Can you add a functional test that tries to forge a hash request for this piece above? That way we are certain that (1) this VCL is necessary and (2) it works properly.