Yubikey could be interesting for protecting the local vault. I haven't looked into it yet on how easy it is to do, but it is interesting and I will look into it. I cannot make any guarantees yet though.