/*
  Content-Security-Policy: default-src 'self'; style-src 'self' *.cloudfront.net 'unsafe-inline'; font-src 'self' *.cloudfront.net; script-src 'self' unpkg.com 'unsafe-inline'; img-src 'self' *.cloudfront.net; object-src 'none'; frame-src 'none'; base-uri 'none';
  X-Frame-Options: DENY
  X-XSS-Protection: 1
  X-Content-Type-Options: nosniff
  X-Clacks-Overhead: GNU Terry Pratchett
/.well-known/webfinger
  Content-Type: application/jrd+json
