thinking of trying something out on my personal node, with a key on a secure element (and never leaving it)
would be a small USB dongle, could also use for auto-unlock with TPM
nostr:npub1s5rq2ztdh76shy578znvympa2mzz2vjushs9mc5mwkdupewke67qeuf7u3 weren't you doing something in this area?
Discussion
this would be the next step up, from ACINQ’s current EC2 Nitro based solution
I always figured it would be easiest to just gain access to a node and drain it with commands, unless the hsm sent you a notification on large withdraws that you would have to approve. But even then it could do it little by little over time.
for this reason you’d approve each spend, or set a quota per recipient