CDN-level security