dm ioctl: add flag to wipe buffers for secure data