While http documentation says it is a Read-Only map, it isn't and nothing (not event tests) prevent from writing to an incoming message headers.
This is actually a feature which some might find useful (for writing express middlewares), so my
suggestion is to fix the documentation, not the code.