HSTS should not include preload directive

[ruffy91]

Is it possible to disable the including of the preload and includeSubDomains directives when enabling HSTS?

A default HSTS policy should never include the preload directive, as this will allow anyone to submit a donmain to https://hstspreload.org/ which will include the domain in future browser versions as a hardcoded list.
It is very cumbersome and can take months to get a domain off this list.

Because of this https://hstspreload.org/ recommends to not include preload in any default HSTS setting.