in documentation, specify use of CASScrubRequestHeaders, etc.