>"Encrypt the state and delete the key"

That's not such a good idea, because when you swap your state back in again
you can't decrypt it any more and end up with a kernel panic.

Peter.