Only allow text/plain, application/json & application/cbor for now