Your cache-key idea infiltrates the overall idea with third-party access. As a site owner who wants to place Ads I just use your script notation to include the ad and then leak data again...
The cache-key idea would only work if the user themselves could specify it for every resource.