HSTS Apache: Header always set

Redirections and "Forbidden" pages should also get HSTS.