There may be reasons to have the setting different in the global web server config. I could solve the problem by changing the line in .htaccess to:
Header setifempty X-Content-Type-Options "nosniff"
It works whether the option is set in the apache config or not.
2 Likes