When using this module to cache data from the cm api endpoints unauthenticated users can read the data since it doesn't have to talk to console-services to authenticate.
Since the data is usually aggregate ( node counts ) or non-sensitive ( the names of facts) this is not generally a blocking concern but it is a concern to be noted.