http proxy to enforce ACLs on fileExpressions in the renderAPI