Way to replace HTTP header being applied by APM portals

All full webtop portals I create have this HTTP header, which I need to override. Using iRules for this is failing. Header in question: Content-Security-Policy: default-src 'self' 'unsafe-inli...