As long as you keep the keys not in HSM, that'll be true. Should also require the use of TPM for storing keys..