This l;ets you add per-vhost arbitrary headers on served files, eg "headers": [{ "X-Content-Type-Options": "nosniff", "X-XSS-Protection": "1; mode=block", "x-frame-options": "SAMEORIGIN" }],