Set `Referrer-Policy` header to `no-referrer` on media downloads.