A `strict-dynamic` policy can be served in a META tag.