The HSTS response header was delivered without the preload flag.