The DNT header is completely irrelevant to security. It's not even clear that it has any meaningful effect on privacy -- most web sites and advertisers ignore the header entirely.