I am using OSM’s tile servers, which have this tile policy.
In the “technical usage requirements” it states that my web app must NOT send no-cache headers. In the note it also says that modern web browsers pass the checks, but my app does send both “Cache-Control: no-cache” and “Pragma: no-cache”.
I did find an option in leaflet to send the Referer header, but there doesn’t seem to be a similar option for these cache headers.