A platform serves highly sensitive tenant-specific responses through CloudFront. A cache configuration accidentally ignores an authorization-dependent response variation. What should be done?

1. Use one common cache key for every tenant and hide the origin hostname.
2. Rely only on HTTPS because encryption prevents incorrect cache sharing.
3. Correct the cache behavior so private responses are not shared across unauthorized users.
4. Increase the TTL to reduce the number of origin requests.