Is there a way to place the HTTP Security Headers in wp-config.php instead of in .htaccess or functions.php? If so, what