pub const SECURITY_FIELDS: &'static [(&'static str, &'static str)];
v0.141 (ADR 0164): the security-headers policy fields, offered at a field-name position inside a security { } block. The closed set is these two.
security { }