currently Garmr is agnostic of "X-Content-Type-Options" headers. that should and could be changed rather easily