I think nsecBunker by nostr:npub1l2vyh47mk2p0qlsku7hg0vn29faehy9hy34ygaclpn66ukqp3afqutajft offers a way by generating short lived sub keys and using these instead of the master one.