[krbdev.mit.edu #6574] prompter users should zero out reply data before freeing it

[Greg Hudson via RT]

I'd like to point out the existence of the shiny new zapfree() macro to
anyone working on fixing this.