Doesn't Tom's key fragment have to be on a disk somewhere for things to work?

That's the actual weak link to attack.