Cookie Persistence “Secure” and “HTTP Only”

If applied to the virtual on which the cookie is inserted, you can get away with this (it takes advantage of the fact that "HTTP::header replace" affects only the last instance of a given header);-

when HTTP_RESPONSE {
    if {[HTTP::cookie exists "cookiename"} {
        HTTP::header replace Set-Cookie "[HTTP::header value Set-Cookie];HttpOnly;Secure"
    }
}