I Zeroized My Secret. Or Did I?

If you work with secret keys — signing keys, API tokens, anything that must not leak — you’ve probably written this happy little line and felt good about it: 1 secret.zeroize(); Wiped! Auditor happy, you happy. And honestly, that line is doing real work. But there’s a surprising amount of...