fix #9

CHANGELOG

@@ -3,6 +3,9 @@ NEXT:	Records created by Crypt::PWSafe3 (eg. the ones fetched
 	object, so that you can modify them directly and call
 	$vault->save afterwards without using $vault->modifyrecord.
 
+        erase passwd from memory using zeros instead of
+        random bytes. fixes github#9.
+
 1.21:
 	forgot to load File::Spec
 

lib/Crypt/PWSafe3.pm

@@ -153,7 +153,7 @@ sub stretchpw {
     $sha->add( ( $stretched) );
     $stretched = $sha->digest();
   }
-  $passwd = $this->random(64);
+  $passwd = 0 x 64;
   return $stretched;
 }