Wouldn&#x27;t it be better to have your &quot;infinity key&quot; not reveal the secret data, using a smartcard or similar technology? That way if the computer that it&#x27;s connected to is untrusted, no further damage could be done after removing the card. That + TLS client certificates stored on this card seem like it might not be the worst user experience, while still remaining reasonably secure. From my brief Googling it looks like the US military uses something like this.