Disabling forwarding of X-Forwarded-For header?

Yep, so turns out that setting the [entry.http.forwardHeaders] trustedIPs to an "impossible IP" list works!
Thank you so much @rtribotte for pointing me in the right direction.