Allows to easily set 'httpOnly' or 'secure' site-wide in the
configuration instead of setting on individual cookies. Then can be
overrided as needed for specific cookies in the config or when calling
add_cookie().