ChaCha20Rng does not currently implement Zeroize. It seems like there is no trivial way to implement it, so it either requires an upstream contribution or unsafe memory fiddling. Either way, this behavior should be implemented and used in batch_contribution::derive_taus.