I always figured it would be easiest to just gain access to a node and drain it with commands, unless the hsm sent you a notification on large withdraws that you would have to approve. But even then it could do it little by little over time.