Add a last-ditch memwipe() implementation for nss+old glibc