pub(crate) fn impl_zeroize_on_drop(input: &DeriveInput) -> TokenStream