use explicit_bzero() for key materials, including that in the session. there was also a local buffer which was left around
use explicit_bzero() for key materials, including that in the session.
there was also a local buffer which was left around

orumin/openbsd-efivars,orumin/openbsd-efivars,orumin/openbsd-efivars,orumin/openbsd-efivars