You could always register two keys, at least where that is supported, one for your Mac, another a hardware token that resides in a safe. Requires diligence, tho

You could always register two keys, at least where that is supported, one for your Mac, another a hardware token that resides in a safe. Requires diligence, though, and is hard to verify that it’s been done correctly everywhere.