Hi @Tethich,
Regarding the UI, I think it can be something really simple in Cloud Manager (similar to IP Allow List) where developers can set a list of allowed headers, and then those are appended to the default list defined by Adobe. I want to emphasize that this functionality is not from the cod...