The keyboard itself could encrypt the keystrokes before sending them to the OS? That could work. Moves the threat to attacking the keyboard firmware.