Handle out-of-memory errors gracefully

[SWilson4]

Currently, we handle malloc failures in common code by immediately exiting with a nonzero return code. It could be a good idea to give the program a chance to clear secrets out of memory before exiting.

Related older issue: #1456.