I went with dban, which is probably overkill in my case, but at least I have
confidence someone wont be able to retrieve my invoices or whatever. I
started it last night, and its almost halfway done.  I've got decently large
disks and running 3 passes on them.

thanks,
-j