I must be getting old - I am pretty sure I used in the past a pool alloc that would nicely scrub any keys from memory upon pool clear down; along with some locking of the page on unix & and some magic to make that stick across forks.
Have I lost it completely ? Or was that never submitted, Dw.
