This partially mitigates leakage of passwords to swap.

Note that information about the password from the X11 event queue, as
well as leakage on suspend-to-disk, may still be leaked.

Document the reasons why we don't endless loop here, as this password
buffer code may otherwise be too hard to follow.