Use explicit_bzero for password data.

The C standard does not guarantee that memset won't be optimized away by
a compiler, which means that memset for password data is not safe.

Also clear password data in signal handler for SIGTERM, otherwise it
could happen that password data is left in memory that way.

Signed-off-by: Tobias Stoeckmann <tobias@stoeckmann.org>