REFERRER: Be more explicit about the impact of 'Origin *' policies.