Implement the use of SecureString

[jbubriski]

I believe that SecureString should be used when storing sensitive data in memory temporarily. We should probably use that, and require that the consumer of the API use that too.

[lorddev]

I <3 SecureString. I used it in the same way for credit card info at a former employer. It didn't really catch on organization-wide, though.