Sanity-check public_url on each incoming request.