Reference caching can leak data to unauthorized users