Having a separate dedicated general purpose computing device not connected to the open internet perhaps.