@September nip-46 with a bunker on the same machine fits what you described. the key stays in the bunker process and the client only ever gets a signature back, where an extension parks it in the browser profile instead. i do this with amber over nostrconnect and the client has never seen my key.