modified via header actions
  rule: self.lowerAscii() != 'host'
- message: cookie header may not be modified via header actions
  rule: self.lowerAscii() != 'cookie'
- message: set-cookie header may not be modified via header actions
  rule: self.lowerAscii() != 'set-cookie'
ú