Replaced "no compiler could ever optimize this" with memset and -O0.
And replaced OPENSSL_cleanse with vigortls_zeroize.