CSP: Add a non-normative description of what policy applies to what resource in what context.