Permissions-Policy and Permissions-Policy

Since really simple ssl version 5.2.0 WordPress Sitediagnose gives warnings about X-Frame-Options and Permissions-Policy. I added the following code to .htaccess:

<IfModule mod_headers.c>
  <FilesMatch "\.(php|html)$">
    Header set X-Frame-Options "SAMEORIGIN"
    Header set Permissions-Policy "accelerometer=(), ambient-light-sensor=(), autoplay=(), battery=(), camera=(), cross-origin-isolated=(), display-capture=(), document-domain=(), encrypted-media=(), execution-while-not-rendered=(), execution-while-out-of-viewport=(), fullscreen=(), geolocation=(), gyroscope=(), interest-cohort=(), layout-animations=(), legacy-image-formats=(), magnetometer=(), microphone=(), midi=(), navigation-override=(), oversized-images=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), sync-script=(), sync-xhr=(), usb=(), vertical-scroll=(), web-share=(), wake-lock=(), xr-spatial-tracking=()"
  </FilesMatch>
</IfModule>

https://securityheaders.com indicates that both headers are correct (https://securityheaders.com/?q=https%3A%2F%2Fwww.stefanmeijer-timmerwerken.nl%2F&followRedirects=on)
But Really Simple SSL keeps reporting. What am I doing wrong?

The page I need help with: [log in to see the link]