The `secure` parameter of `StreamResponse.set_cookie()` is [documented](https://docs.aiohttp.org/en/stable/web_reference.html#aiohttp.web.StreamResponse.set_cookie) as `bool`, but is [annotated](https://github.com/aio-libs/aiohttp/blob/62365364889981a2e5d3cd36a25240c9c38693fe/aiohttp/web_response.py#L172) as `Optional[str]`. What is right?