So do you not use FDE? I'd think that to protect data at rest, especially on a laptop, it's good practice to power down whenever you're away. Otherwise keys are just sitting there in memory.