fix(proxy-cache): keep Vary variant keys out of reach of a crafted request (#13831)