Comment by StavrosK

How can you check that the closed-source process won't ever read the key from the disk without elaborate contortions?