This is already in wide use by Trezor users. A user can have an arbitrary number of decoy wallets unlocked by the same root private key, but different passphrases.