Which is why the key should be physically given to the system when it is started and then only stored in memory. The key file should not be available on any net

Which is why the key should be physically given to the system when it is started and then only stored in memory. The key file should not be available on any network-attached machine. Of course there's still potential for exploits in this scenario, but it does help minimize the attack surface.