If you do a memory dump on a hypervisor you can get all the memory of the VMs on that server including keys as they are being used.