Disable subdomain enforcement with HSTS
Disable subdomain enforcement with HSTS

I do not want to commit to *.datahub.berkeley.edu
being just HTTPS forever. While it's true now, and I'd like
it to be true in the future, setting includeSubDomains
binds our hands. I'd like to not do that.

ryanlovett/datahub,ryanlovett/datahub,berkeley-dsep-infra/datahub,berkeley-dsep-infra/datahub,berkeley-dsep-infra/datahub,ryanlovett/datahub