Furthermore, the "documentation" on this makes it seem ridiculously simplistic in terms of its functionality.
Non authenticated pages are cached regardless of status? Http 500's are cached without an option not to?
The requirement to set a "shard" http header seems to indicate that the http Host header is not used to identify a unique URL?