Lazily load SecurityHeadersConfig