`... unless except.include? :content_security_policy`?