Use a HSM like a yubikey or Google titan key to sign the message. There are modes where the key is generated on-device and not (without significant hacking) rec

Use a HSM like a yubikey or Google titan key to sign the message. There are modes where the key is generated on-device and not (without significant hacking) recoverable off device. Then physically hide the key with said treasure.