I am creating a service with restify + nginx. Security headers such as "x-xss-protection" are being added by nginx
The header is sent correctly when the res