Suggestion: proxy calls to private-per-user-per-notebook whitelisted urls