Correct. The other implementations all zero the object, also not required. Think we only need to zero the password portion.