If you can't do it on desktop, you can't do it at all. Mainly because some of us have real work to do.
If the only "usable" implementation is on a hard-to-physically-secure mobile device that uses a tonne of different uncontrolled network access points a day -- that's not really an option now, is it?