There is. Usability of such a solution would be low. You just need a device that you tell it some master key, or that can export it for you. eg a true ($$$$$)

There is. Usability of such a solution would be low. You just need a device that you tell it some master key, or that can export it for you. eg a true ($$$$$) HSM can do this, exporting keys that can [only] be imported to another device configured for the same security "world".