use memset_s on sensitive data

-O2 might optimize memset() on variables, which are never read again, away