If you have full disc encryption enabled, you'll need to keep the encryption key in memory somewhere (encrypted or not). Basically, if an attacker gets hold of your running computer and you don't have serious hardware security then you're screwed.