Add a 'trusted-cgi-referrer' directive