remove mlock. sorry, i don't think swapping out stack mid execution is
worth worrying about. more clutter than useful. change munlock to
memzero accordingly.
rearrange just a bit the lifetime of some secret keys.
move defs up to be prettier
more efficient realloc for keyring
some magic numbers missed previously
give binary marker a name