Break out a Headers._isForbidden asserter.