zeroize has to be kept at 1.3.0 for now to keep compatibility with
another dependency of the Pod, chacha20poly1305.