Mitigate malicious session cookies set on a subdomain from
being read by the parent domain.