Moving RFC 6454 up to normative
Alternative service isn't sticky, it's the choice to secure that is
Focus the HTTP-TLS header field description on the commitment aspect
chmod -x
Noting exception to the SHOULD