I've been meaning to hack a trackpoint into my Kinesis. It's been done before, mounted where you can control with the thumb so you don't need to move your hand at all.
Only seen it done with ones removed from old keyboards. On at least some (including the IBM SpaceSaver IIs that I have), it's on a separate little board. I believe the outputs are pretty simple to decode.