Update policy

[smlx]

Update policy as per discussion with @Schnitzel

• allow configuration-snippet with the same allow-list as server-snippet.
• add more_set_headers to the allow-list.