pub(crate) fn derive_zeroize_impl(input: DeriveInput) -> TokenStream