But it's not possible to turn off the protection, because the variable `Response::$preventBreachAttack` is private. It just prevents sending of the invisible garbage more than once.