You can do a boot time scan to ensure the safety,coz I dont think search indexer load the "un encrypted "signature to the memory since it doesnt use them.