HSTS: include subdomains of www and seccdn (bug #1355381)