Private key stored in a passworded file on an encrypted disk, plus a key fob as second factor.

Pretty hard to get better security.