configurable authorization header checking in ResponseCachingPolicyProvider

[namnik]

I need to use response caching despite exist authorization key in request header!
I know security issues about authorization header when using response caching.
but can configurable and optional to use this validation in the response caching Middleware?

I notice that both class and interface for this validation: ResponseCachingPolicyProvider and IResponseCachingPolicyProvider is Internal.

        if (!StringValues.IsNullOrEmpty(request.Headers[HeaderNames.Authorization]))
        {
            context.Logger.RequestWithAuthorizationNotCacheable();
            return false;
        }

[jkotalik]

Dup of #14569