must be used to wipe out sensitive data from memory should make use of memset_s or SecureZeroMemory when available