Yeah that does it for new keys generated, any old keys in IDB obviously still are exposed.