CLONE - Review how clean up is done in ksmutil.c

In the functions in ksmutil.c (and probably enforcer.c too) we need to review how clean up is done whenever an error code or early exit path is hit.
We need to make sure that where needed

• ctx is released
• any database connection is released
• any hsm connection is released
• structures are freed
• etc.

It may make sense to introduce a general on_exit() function to simplify this.