Exactly, the best practices with PGP is to generate a main key for long term use and kept in cold storage, and generate subkeys that will be used on specific de

Exactly, the best practices with PGP is to generate a main key for long term use and kept in cold storage, and generate subkeys that will be used on specific devices and revoked whenever necessary. The idea of a root of trust can be applied here as well.