Only with PDFs that have been exposed on another website.

Why? Inspect the network traffic when expanding an `nhsta` item, and notice that it requests `api.nhsta.gov/...` for the PDF link.