MFC r332395 (ian): Use explicit_bzero() when cleaning values out of the kenv

Sometimes the values contain geli passphrases being communicated from
loader(8) to the kernel, and some day the compiler may decide to start
eliding calls to memset() for a pointer which is not dereferenced again
before being passed to free().