example configs: kill STS/CT headers