pike_memory: add guaranteed_memset()

Most compilers (gcc in recent versions) optimize away memset before
free. This can prevent sensitive data from being wiped.