The tap addition is great! also nice to see that it's now possible to set e-mail headers. Out of interest, is there a recommended method for configuring header

The tap addition is great! also nice to see that it's now possible to set e-mail headers. Out of interest, is there a recommended method for configuring headers transmitted to clients? as I would like to set a Content-Security-Policy.