lua/http: set no-referrer policy