Allow New Relic and Google Analytics in Content Security Policy headers.