What are best practices for #Nostr key management?

You're not supposed to enter nsec into clients for security purposes, but you can't post notes without it?