Configure a set of restricted HTTP header names to remove from unauthorized users' responses. Header names are case-insensitive. Users lacking the Overall/Read permission will have these headers removed from HTTP responses. Example headers that can be filtered include: Do note that some headers are set by Jetty directly such as Server which cannot be removed through this mechanism. This can only be modified using a reverse HTTP proxy. See for example mod_headers in Apache Web Server.