Properly clear AES keys, not just cleared flag.