[SECURITY] secmark: nul-terminate secdata