crypto: _afscrypto_strdup must copy trailing NUL