Currently there is no way to add HSTS (Strict-Transport-Security) and CSP(Content Security Policy) in to the list of http headers. Clients who use tools to measure network security score will benefit from these new headers.