To make our on-prem One Time Secret service to work properly, without expiritng urls I implemented the following on the nginx daemon to filter out link previews request. Guess the same could be done on any HTTP service.