Ephemeral Encryption Keys
The answer is in what Apple means by "ephemeral session key". See the BlackHat session starting around 12:00 in.

The raw file encryption keys are wrapped with a ephemeral key when outside the SEP (Secure Enclave Processor), the actual key is never exposed to the normal application processor. The ephemeral keys are bound to the boot session of the phone.