secure: decrease a (stack allocated) buffer size