explicit_bzero the ChanServ password when it isn't required anymore. With a little work a malicious module could find this with a simple buffer [over|under]flow.