An allocator zeroizing memory on deallocation.
This is safer than zeroizing your secret objects on drop because the
allocator approach also zeroizes old memory when the object is only moved
in memory but not dropped. This can happen for example when resizing
Wrapper around an allocator which zeroizes memory on deallocation. See the module level documentation.