since we attempt to enforce through headers. But maybe leaving unset is useful in that it surfaces weird cases like that