The service template should be updated to test for secure-headers