Can we set HttpOnly flag to KEYCLOAK_SESSION cookie?

Why does the KEYCLOAK_SESSION cookie in Keycloak does not have HttpOnly flag set in first place as against other cookies?