the headers stay too, it's specifically the x-vapi-secret which doesn't