I want to use the AES implementation in the standard library of crypto in GO.

But as far as I know, I don't have any control where the expanded key is stored and when it is freed, so this can cause a security problem.

I wanted to use memguard (https://github.com/awnumar/memguard) library to secure the key, but I don't have any access to the key after it is expanded.

Any ideas how can I store and manage the key securely?