zeroing the on-stack output in escrypt_r() doesn't hurt.