Well you can always keep your keys in a removable drive rather than on persistent storage in your client device. If you can't trust your client device, you pro

Well you can always keep your keys in a removable drive rather than on persistent storage in your client device. If you can't trust your client device, you probably have bigger issues with either method - for instance, can you trust that the client is not logging all keystrokes?