Prevent setting X-SSL-* by the client.