Cookies can still be read if this is set to "off."