Multisig would be good, especially if it's actually a address keypair, as it would allow you to verify the balance held exists.