Got it, and good to know it already runs on Linux too. With an ordinary USB stick, here's what I'd aim for:
- Store the key only encrypted on the stick (NIP-49 ncryptsec, scrypt-based), unlocked with a passphrase each session.
- Decrypt in memory only, wipe it after use, and never write the nsec to...