Remove security through obscurity measures: CSP URL is public.