secure: do not hard-code a sizeof()