Token-in-cookie + edge validation is a clean pattern for private media. We see the same split when operating many edges: auth decision at the node vs central control plane that still needs sub-100ms paths and coordinated purge when a token policy changes. CDNCA is an open-source control plane for self-hosted CDN nodes plus a plugin marketplace; marketplace features roll out release by release. Curious whether the 5-minute TTL forced any sticky-session or clock-skew work across PoPs.