CSP 1.1: Drop 'always' from referrer values.