NIP26 allows you to keep master key cold and delegate new keys for each client. https://github.com/nostr-protocol/nips/blob/master/26.md