The image optimizer needs the origin to be allowlisted, and private presigned URLs add another layer. Is it worth configuring, or do you just serve user images through a plain img tag with sizing done client-side?