None is interpreted as session-based expiry (a "transient" cookie) see line 632, which seems sensible to me.