Does it remove the disk encryption keys from memory?
Right now it looks difficult to implement. There's no instant "purge keys from RAM" command and shutdown is slow. Maybe aiming for a similar state to logout might be a good middle ground? Logout locks the keychain and kills apps.