fix(cache): mark restricted files as no-cache for cache-control

Author: tmorrell

invenio_s3/helpers.py

@@ -96,5 +96,7 @@ def redirect_stream(
         if cache_timeout is not None:
             rv.cache_control.max_age = cache_timeout
             rv.expires = int(time() + cache_timeout)
+    else:
+        rv.cache_control.no_cache = True
 
     return rv