How about the users keeping the key and supplying each time its need from a separate secure app? And that app wouldn't even contain the complete key, but requires they supply the last three digits each time. And they can tattoo that somewhere on their body.