We generally clear out the cryptographic key and key schedule from local variables before relinquishing control flow, but this case was missed. Reported by jhb@FreeBSD.org.