CSP: Limit the client hint to redirect-enabled policies.