RT#7092: Apache on godard adds an additional X-Xss-Protection