Once a website is set up to only use HTTPS I think there shouldn't be a reason not to enable secure (tracking) cookies by default. Is there an easy way this plugin could do it?