nope, we remove the authorization subscriber in https://github.com/ddeboer/FOSHttpCacheBundle/pull/71 - but basically we can just use the new context subscriber in this scenario. if the request to the url is forbidden, we never even end up in the listener (as i discovered with the 404 problem)