so it was about the max-age bit only? because for everything else, there is nothing to do as we can't cache pages that are different for an admin anyways, right?

i wonder if an option to disable the event handler for this response would not be more general. with this option, you would need to repeat the unless_role for each rule.