Update secure_headers configuration for upstream changes