oh snap. i didn't realize you could use `*` to reset one of the options. I didn't use `default-src` because I thought that meant `frame-src` was doomed.