So there's an idea: a wallet format that lets you decrypt with any of one or more passphrases, with each passphrase giving a different set of addresses.
This is already in wide use by Trezor users. A user can have an arbitrary number of decoy wallets unlocked by the same root private key, but different passphrases.
Trezor firmware supports Monero. No zcash as of yet.