protect stack canary from leak via read-as-string by zeroing second byte