Strawman: `require-for-all` value for the CSP directive.