The best UX I can think of, is a two part device - a secure/trust interface device that you can plug into any UBS and some sort of ‘key’ that you plug into said device. Swapping around min SD cards is just too hard for folks.