Rotate keys regularly through a secure channel. At some point these discussions devolve into a variant of "Which ammunition is least likely to kill me when I inevitably shoot myself?"
the secure channel being...? The point of "complicated" solutions like this is that the complicated stuff is done by the sysadmin, not the user.