That would mitigate one of the issues with auto-wiping (because the owner could store a copy of the key elsewhere and use it to recover the data if a false posi

That would mitigate one of the issues with auto-wiping (because the owner could store a copy of the key elsewhere and use it to recover the data if a false positive happened), but it should be explained very clearly to the user.