response_headers:
  Permissions-Policy: "microphone=(), camera=(), geolocation=(), interest-cohort=()"
  Referrer-Policy: "no-referrer-when-downgrade"
  Strict-Transport-Security: "max-age=15724800; includeSubDomains; preload"
  X-Content-Type-Options: "nosniff"
  X-Frame-Options: "SAMEORIGIN"
  X-XSS-Protection: "1; mode=block"