2f6c801 Try to not leave secret data on the stack or heap. (Gregory Maxwell)
This makes a basic effort and has not been audited. Doesn't appear to have a measurable performance impact on bench. It also adds a secp256k1_num_free to secp256k1_ecdsa_pubkey_create.