[pinpeliponni]

As long as you keep the keys not in HSM, that'll be true. Should also require the use of TPM for storing keys..

[tptacek]

No, this isn't valid reasoning.