Thought I’d come back and give the final answer.
Thank you to everyone that suggested “Do not save encrypted pages to disk”.
I followed EricLaw’s advice and set:
Cache-Control: private
I also found that I had Pragma: no-cache, which I removed.
Works like a charm now 🙂