It is doable, but only if (as in necessary, not sufficient) the key/password is typed by the user and never pre-stored on the phone.