Zero out the DES_cblock structure instead of the (not yet used at this point in the function) key schedule. The contents could potentially be left on the stack in the case of an error return from _gssapi_verify_pad().