You could also smol brain it.. each npub has its own time expiry, the 'hot keys' are short, then the ones you want to cold store, don't even touch the internet till they're up for bat, with like a year expiry or something.. and when those go hot, you add a few more cold ones.