hey, following the recommendation on this page about CORS the command

ory patch project <your-project-id> \
  --replace '/cors_public/enabled=true' \
  --replace '/cors_public/origins=["https://*.foobar.ory"]'

works fine. But trying to add other fields (for example

--replace '/cors_public/exposed_headers=["Set-Cookie"]

doesn't work. Is it intentional? if I run

ory get identity-config ...

I will get that allowed_origins and enabled fields were changed.

serve:
  admin:
    base_url: <https://eager-franklin-3vbqv90l3p.projects.oryapis.com/>
    request_log:
      disable_for_health: true
  public:
    base_url: <https://eager-franklin-3vbqv90l3p.projects.oryapis.com/>
    cors:
      allowed_origins:
      - <https://bloom-git-main-yudintsevegors-projects.vercel.app>
      enabled: true
    request_log:
      disable_for_health: true

what other fields we could add to adjust CORS?