Oh, cool! If you only move it to `<VirtualHost *:443>` then it would only be sent for HTTPS responses, which would be perfect. (For HTTP it gets ignored anyway.)