Unrecognised feature names are ignored silently by browsers. That is deliberate forward-compatibility, but it also means a typo does nothing and looks exactly like a working policy.
nginx.conf
iframe allow attribute
An iframe can only be granted what the parent page already has. The allow attribute delegates permission downwards — it can never widen beyond your own header, so blocking a feature at the top level blocks it everywhere below.