Per and I discussed the recent string clearing changes and think that most of them should be rolled back. Having clear on exit set on all random strings, random seeds and all decrypted data is often not needed. Having the flag propagade through string operations is probably also not desired in the general case.