EAP-pwd: Clear identity string and temporary buffer explicitly