I went with dban, which is probably overkill in my case, but at least I have confidence someone wont be able to retrieve my invoices or whatever. I started it last night, and its almost halfway done.  I've got decently large disks and running 3 passes on them.

thanks,
-j