The current support for HTTP field is rudimentary. For instance, as per [Section 2.1 of RFC9421](https://datatracker.ietf.org/doc/html/rfc9421#section-2.1), we should add `sf` and `bs`. `web-bot-auth` may not need them yet, but that would be a nice to have. cc @AkshatM