A TPM chip is also easy to use with libsimple-tpm-pk11. Not a perfect solution but at least the private key cannot be stolen and misused without direct access to the computer.