Migrate clear_on_drop -> zeroize

zeroize is better than clear_on_drop, not use FFI so is compatible with WASM.

Edited by Éloïs