It's not that simple. Keystore uses an HSM if available. Decrypting FDE and having root gets you nowhere if the keys are in an HSM. The only way to secrets on

It's not that simple. Keystore uses an HSM if available. Decrypting FDE and having root gets you nowhere if the keys are in an HSM. The only way to secrets on a device with an HSM is to get past FDE, get root, and disable the HSM BEFORE the keys are created/stored. Disabling the HSM after the keys have been stored simply wipes the keys and makes them unrecoverable forever.