Hi, Just marking this as resolved (via email). In case someone else has the same issue, this appeared to be a server issue, reported solution: another plugin was duplicating headers. Headers related to policies were removed and policy was set at Nginx level.
