ok tbh i'm not sure about at free... most golang signature and encryption implementations include a step at the end of stuff where they write zeroes to each byte/word of the memory of the objects

i think someone wrote a nice memfence thing also which triggers an interrupt when nearby memory is accessed