Expirable URLs & forbidden list for keys