InternalFileDecryptor::WipeOutDecryptionKeys() merely call std::string::clear to dispose of the decryption key contents, but that method is not guaranteed to clear memory (it probably doesn't, actually).
We should probably devise a portable wrapper function for the various OS-specific memory clearing utilities.
Reporter: Antoine Pitrou / @pitrou
Note: This issue was originally created as ARROW-16202. Please see the migration documentation for further details.