nonsecure cached representations.

Any registered user can see (via the backend) any cached representation, if (s)he know its uuid. Do we need to fix it? What would be the criteria of access to a cached representations? A user "A" can read a cached representation 'B' if he has te least read access to ALL annotations the targets of which have this cached representations. Something like that?
