Only cap lifetime of persistent cookies created client-side through document.cookie...