We have recently started using your API, and have a bug such that while we thought we were getting the identity flags from cache we apparently weren't.
We will fix that bug in our consumer shortly, but I mention only to set the context.
The problem is, metrics wise, I can count on my side how often I call GetIdentityFlags but what I can't tell is how many requests hit the cache (hooray - unbilled!) and how many didn't (oh no - billed!). So it is hard for me to setup alerting on my side for excessive usage.
What would be valuable is it GetIdentityFlags somehow indicated to the caller whether this came from cache or not.
Alas I don't have time to implement it myself, but I am hoping my previous efffort (#126) may have bought me enough brownie points for you to add it to your roadmap. 😸