enable secure_delete by default

This sanitizes deleted data by overwriting it with zeroes, rather than
having it persist within SQLite's free list. In some cases, the data may
end up persisting on the underlying storage due to wear levelling but
only a process with direct access to block devices would be able to
access it.

This can be disabled via `PRAGMA SECURE_DELETE = 0;` for niches where
deletion throughput is more important than enhanced privacy. The
performance impact is very small unless large strings and blobs are
being deleted. Android itself doesn't have any uses where disabling it
would make sense, and very few apps will be negatively impacted. As a
data point, Chromium and Firefox already use this for their own

Change-Id: I07f0e1584f0b2405f080198ad7b1f4e7ed7f68fb
1 file changed
tree: 3a13829aec2ac9dbfd4a66aad874be7542a96432
  1. CleanSpec.mk
  2. README.version
  3. android/
  4. dist/