They have to load it before first unlock by definition, and at this point I don't believe that it would be possible to establish persistence. Restart your phone when it's handed back to you by people you don't trust.