OpenBSD is introducing some neat ways of marking sensitive memory so you don't accidentally expose data in a core dump: https://undeadly.org/cgi?action=article;sid=20190605110020