I'm storing a bunch of content in Rackspace's cloudfiles, and I need to serve that content to the client, but securely. It's not like these are super secret files, but putting them on a publicly accessible cdn would be unacceptable.
Right now I'm reading the files in my web framework and serving the contents as a response. I'd much rather return a response with an X-Accel-Redirect header.
The problem is you need an auth token that expires after 24 hours.
What are serverfault's thoughts on this?