Which option of the openvpn command should be used to ensure that ephemeral keys are not written to the swap space?