For anyone who runs into the same issues, steps to get ads going seems to be:
- Disable content_security_policy
- Make sure the official Ad plugin is installed and active.
- Create ad unit’s for mobile and desktop to place in the ad settings for use.
Seems if you try doing meta http-equiv="Content-Security-Policy" in your head tags, it still complains about the policies if the security policy is enabled in the admin settings.