Zero and free scratch_buf after error in decrypt