How to have separate ContentSecurityPolicy.php for different environments in CI4?

I am enabling CSP for a CI4 project and I wonder how we can have different Content Security Policy directives for development and production.

Separate ContentSecurityPolicy.php files in Config\development and Config\productiondirectories didn't work.