Keep your SSH private keys on a USB keychain; use a script to initialize a self-destructing ssh-agent instance