remove_http_headers settings access:
title: 'Administer the Remove HTTP headers settings'
restrict access: TRUE