Yes, that's what I normally do now and it's the weak link (and sometimes testing with read-only) but what I really want to do (that's my question) is to reject persistence and load my settings without a possibility to change when I reboot. If I need to change or update something I will load it later in the read-only knoppix, until then those files and folders will be encrypted in muy pendrive.