One time pull request

I am looking to implement a functionality of the one time pull request for a docker image. What I was thinking is to implement this functionality within proxy and make a client to access docker repository through it.
Did anyone implement a custom logic in proxy for docker repository?
Basically, I would like to provide an URL or an image with tag in a way that once asked it will work (regardless if it is invoked by docker pull or by kubernetes pod). However, if there will be another attempt to pull the image using this image:tag the request will fail.
I would prefer to operate using URLs, but it seems impossible.

Thank you,