Add cookie roleset

Based off of noreveal, but does reveal.