Use Hapi's builtin config for the Strict-Transport-Security header