const REFUSED_HEADERS: &[&str];
Request headers a widget can’t set: srv sets them, or they’d change how the connection itself behaves.