Finding out which library is used would not be a big deal, but there's also no reason why cookie keys would have to reveal that either. Signed cookies with app

Finding out which library is used would not be a big deal, but there's also no reason why cookie keys would have to reveal that either. Signed cookies with app name as key should be good enough for all purposes.