add_header	X-Download-Options	noopen always;
add_header	X-Permitted-Cross-Domain-Policies	none always;