- Replace file with configuration snippet.
- Allow some domains, disallow others.

We set it in the proxy anyway, don't send 2 Strict-Transport-Security
headers.