When generating a plain file key, clear the key from memory after encryption Consider some clearmem function or overwriting with zero bytes (array)