Implement MTA-STS (use published policies)