The Jade mod is a nice idea because it's secure core, open source, robust, and obtainable through a relatively trustworthy supply chain. Should be able to manage generation of HD key chains without difficulty.