0 on success, -1 otherwise
https://download.libsodium.org/doc/memory_management#guarded-heap-allocations
See Implementation