The encryption key could be a function of his login password and it could be stored in-memory after he is logged in. The issue is to have a trigger which wipes it from memory by logging out the current user when the police shows up, and unplugging the SD is a nice trigger for that.
That's at least what I imagined, his setup might be completely different (a keyboard combination for logging out might also work better).