Use explicit_bzero to remove the password.
Set the password to NULL after free.