At the moment we don't wipe/zero memory containing sensitive data. Also we don't/can't set memory to non-paged. Need to document it as part of the threat model.