Not only OS kernels need to keep secrets, and not only OS kernel coders need to know how.

Sometimes you have to put the zeroing code in its own .o file so the caller's compiler won't know what it does.