If these headers should be added as a matter of best practice, then I don't think the nginx config is the place we should encourage people to add them because not everyone uses nginx (and some people don't use a reverse proxy at all).  Rather, we should encourage people to use a Play filter to add them.