As hinted in https://github.com/aidantwoods/SecureHeaders/pull/67#issuecomment-345561882, the public API could do with some better coverage.