I went with the "pass unnecessary variables along" option. The cool thing is that since it's only one image on the page I'm worried about, I created a tcl script to send that image, so everything else can still be cached.
Incidently cache-control doesn't seem to be an option after all, b/c aolserver only does HTTP 1.0, not 1.1.