RawSecretKey.wipe
void wipe() nothrow @nogc @trustedZeroizes the key bytes in place.
The garbage collector cannot safely zeroize key material during finalization (touching GC-heap arrays from a destructor is undefined behavior), so key zeroization is an explicit operation: call wipe once the key is no longer needed. Wiping twice is harmless.