add secure_cookie protocol field

This allows OpenConnect to suppress more protocols' cookies from being inadvertently shown in --dump-http-traffic.

(Factored out of !112 (merged).)