Yes, but definitely looking forward for more profound solutions in the future. My preferred solution would look like this:

Main Key on HW Device

Use the HW Device to "activate" or "deactivate" a hot key if needed.

Thus I could use everything with a hot key and if the key gets compromised simply remove the key and add a new one.