mlock credentials memory to prevent swap, zero out key data upon delete
hex encoding tolower fix, generate validation digest