Use BN_clear_free() for the UniformDH private key/shared secret.
Follow the obfs2 spec to the letter and encrypt the padding.