I am using "use client" in a component / app router. I have my vercel.json file as below but when i am embedding an iframe from the vercel deployment url, it is still showing DENY

{
  "headers": [
    {
      "source": "/(.*)",
      "headers": [
        {
          "key": "X-Frame-Options",
          "value": "ALLOW-ALL"
        },
        {
          "key": "Content-Security-Policy",
          "value": "frame-ancestors *"
        }
      ]
    }
  ]
}