h-enk meta: update content security policy