Portable HTTP security policies for CORS, security headers, trusted proxies, IP allow/deny rules and rate limit configuration.