alter CSP settings later (bug 1050350)