Function security_headers 

pub async fn security_headers(request: Request, next: Next) -> Response

Supplies missing defaults, preserving explicit product response policies.