At least CORS preflight fetch uses omit