see https://scotthelme.co.uk/a-new-security-header-feature-policy/
see https://scotthelme.co.uk/a-new-security-header-feature-policy/