Merge remote-tracking branch 'upstream-restricted/pr/423' into mbedtls-1.3-restricted

Resolved simple conflicts caused by the independent addition of
calls to polarssl_zeroize with sometimes whitespace or comment
differences.