For compatibility with other interfaces (accessed through proxies), should use network order for csp header.