use openssl_cleanse instead of memset for crit mem spaces