The conventional wisdom I've been given has indeed be using smart cards for key management. Id love to know if this idea is still the best way.