Make sure that we clear addresses before freeing connections
We should decide whether we want to clear addresses for anonymized connections before we free them. This is not necessarily as sensitive as key material, but it's pretty sensitive.
One argument for why we might not want to is that it'd be a slippery slope that would eventually lead to clearing everything before freeing it, and if that's the way we're heading we should just do that.
To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information