Responses that expire immediately are cacheable. They just have to be revalidated. `max-age=0` is really exactly the same as must-revalidate.