Configure safe status

Allowing control over what is to be considered safe for adding the headers. As discussed in #35 / #33

@ddeboer not sure if this will go well with the idea of adding a section for tags to the configuration file. not every status that should not be cached means that we need to invalidate. ideas or inputs?