Reply To: Where to add security header information like “strict-transport-security”