You are generally guarding against the device being shutdown. Anything assuming the OS is running is already into "well that is easy" territory since if the OS

You are generally guarding against the device being shutdown. Anything assuming the OS is running is already into "well that is easy" territory since if the OS is running those keys are in the same place as this attack leverages.