The last couple of lines of src/allocators.h have a comment:
// This is exactly like std::string, but with a custom allocator.
// (secure_allocator<> is defined in serialize.h)
but that's not true.
secure_allocator<> is defined in allocators.h itself.
