addressed all comments.

• sort prototype definitions alphabetically

The use of zfree is fine and is the intended use case.

• clean key material in the error path too.

• clean before free all crypto material

Barf. Looks like this was already implemented with 913c07a0499, but I failed to sync past that in my Git repo. I'll revisit if I find any differences worth submitting.
--ap