If the designer was particularly paranoid, they could be keeping the keys in RAM only (on machines without swap, of course). If the keys never touch disk, easie

If the designer was particularly paranoid, they could be keeping the keys in RAM only (on machines without swap, of course). If the keys never touch disk, easier to purge them and know they're gone.