SecretKeySpec: don't clone on creation either.