<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<AssignMessage async="false" continueOnError="false" enabled="true" name="Set-security-headers">
    <DisplayName>Set security headers</DisplayName>
    <Set>
        <Headers>
            <Header name="ApiAuth-ApiKey">{private.key}</Header>
            <Header name="ApiAuth-ApiUser">{private.user}</Header>
        </Headers>
    </Set>
    <IgnoreUnresolvedVariables>true</IgnoreUnresolvedVariables>
    <AssignTo createNew="false" transport="https" type="request"/>
</AssignMessage>