FAQ - we do enforce CSP of inline scripts