Extra security settings for domains

Added the following improvements:

- HSTS support on hostname level
- Disable foreign embedding