-record(security_policy, {
    require_https_origin :: boolean(),
    require_csrf :: boolean(),
    max_payload_bytes :: integer()
}).