Forbid headers ending with @raw or starting with __