clarify that %{...}o uses *response* headers