I may be mistaken, but, does the catalog and resolver blobs stay in the same container? If so, Should not we consider using different containers? The point is that the Catalog stay in a private container and the resolver blobs are stored in a public container such that CDN gets enabled for the resolver blobs