class Roda::RodaPlugins::ContentSecurityPolicy::Policy

in the policy, does not set a header.
Set the current policy in the headers hash. If no settings have been made

def set_header(headers)
  return if @opts.empty?
  headers[header_key] ||= header_value
end