Yubi makes an 'actual' HSM product:
* https://www.yubico.com/products/hardware-security-module/
See also perhaps less expensive option:
* https://www.yubico.com/products/hardware-security-module/
See also perhaps less expensive option:
It looks possible, on paper, if you don't poke at it too often.