More thorough AS UT.
Strip P-Served-User on trust boundary.

(also use our new header-deletion method)