REFERRER/CSP2: Make referrer policies explicit.