derive structs without certain fields
Dependency-free no_std secret memory sanitization with safe defaults and an explicit volatile wipe backend.