I was wondering about that already, and TBH, I don't think that's a good idea because when we'll want to do something like disabling cors_support for only one method, we can currently do this:

```python
from cornice import Service
foo = Service(name="foo", path="/foo", spore_origins=('foobar.org',))

@foo.get()
def get_foo(request):
    # do something here, we support CORS

@foo.put(spore_enabled=False)
def put_foo(request):
    # blah
```

I prefer this rather having to pass or construct a "CORSPolicy" object. Also, we will probably not use all the parameters at once that often.

Also, having them as normal parameters allows to reuse the mechanisms that are already implemented in cornice.service.Service, and I think that's really useful, as the users will continue to expect the same behaviour that's already implemented for the rest of the API.