This will work until they just start encrypting cookies server-side.