K 10 svn:author V 3 ian K 8 svn:date V 27 2018-04-10T22:57:56.130178Z K 7 svn:log V 318 Use explicit_bzero() when cleaning values out of the kernel environment. Sometimes the values contain geli passphrases being communicated from loader(8) to the kernel, and some day the compiler may decide to start eliding calls to memset() for a pointer which is not dereferenced again before being passed to free(). END