[help wanted] imgix image optimizer with bunny.net storage source

Hey fellas, I am in a pickle with respect to image access control at my CDN. I understand that this might be a complex topic, but if anyone could give me some pointers, it would be nice.

I have managed to successfully setup ImgIX CDN & Image Optimizer using Nuxt/Image-Edge along with Bunny Storage & Pullzones. On the Bunny PullZone configurations I have restricted access to my CDN to only be reachable from my own domain as well as imgix domains. This part is working. If we directly insert a Bunny CDN URL for my images, a 403 is going to be returned.

However, I am not really finding where on IMGIX to setup such a policy. The issue here is that anyone can copy my img element src link which points to ImgIX CDN and from there, they can remove the query parameters that I used to serve a faster and also lower quality images with no commercial value and consequently gets access to high resolution ones (hosted on Bunny) by overriding the query parameters I provide..

Since these images are photos taken by me and are for sale, you can probably understand why this is an issue.

I though about URL token authentication, with a custom provider, but I don't think this is a solution, since the private key must remain a secret (hence it can only be on the server) and image providers need to be isomorphic, running on both the client and the server.

I am sure there must be away to only allow the Imgix CDN to be accessed from my website domain. This is not the perfect protection, but would cover the simple usecase were people just copy paste the link.

The issue names no repository file, test, or entry point. Start by reviewing the Nuxt Image Imgix provider configuration and the Imgix and Bunny access-control documentation; done would require a clearly supported project change or documented limitation that addresses the requested access policy.