61
x-powered-by is given by the module, for instance php fastcgi module offers to set expose_php=Off
in php.ini
Try to use the more_clear_headers directive from the nginx's HttpHeadersMoreModule which can allow you to declare:
more_clear_headers 'X-Powered-By';
which should do just what you want.