Enable HSTS by default w/ includeSubdomains and preload