remove_http_headers settings access: title: 'Administer the Remove HTTP headers settings' restrict access: TRUE