Allow admins to change the CSP policy in the config file