fix missing h2 headers in security benefits section
 * work on https://github.com/RequestPolicyContinued/requestpolicy/issues/445
 * thanks to @SkySkimmer