From a quick skim of the man page, I see no mention of zeroing any swap space associated with the deallocated memory (whether currently, or previously active).
Other that "make sure your systems are encrypting swap", does anyone have some insight into this issue?
I guess encrypted swap would be a good option (easier than messing with mlock()) According to the docs, this is enabled by default.