every nostr client should just generate a random key. you can "log in" by signing that key with your identity key, and then your identity can be a hardware key because you only use it to log in

https://github.com/nostr-protocol/nips/pull/1450