HTTP/1.1 200 OK Permissions-Policy: geolocation=(self "http://example.com"), payment=(self "http://example.com")