CSP frame-ancestors is missing
We're not going to implement this directive at this time because we already implement X-Frame-Options. The CSP folks and the Frame-Options folks need to have a group hug and decide which we should have because having two is kind of silly.