HSM's properly implemented do not result in clearext backups of these highly important keys. You can do backups without that.