where a cookie has the SECURE attribute, ensuring it must be encrypted