I typically create a new key pair specifically for managing my keys, and when I want to store or transport a key I encrypt it with the pubkey of my 'manager' ke

I typically create a new key pair specifically for managing my keys, and when I want to store or transport a key I encrypt it with the pubkey of my 'manager' key pair, so that if the process is interrupted somehow I can revoke the manager key and fail closed. And then for offline I would just print out the encrypted key.