In /dev/null, duh! Not had an information leak since I implemented that policy (but if someone could tell me my bank card PIN, I'd be eternally grateful).