Before the cache wasn't isolated, and if somebody requested an instance's playlist with a token it could be retrieved without a token later on.
{"token":"foo"}
Needs `status:read` permission; see https://docs.joinmastodon.org/methods/timelines/#tag