[yjftsjthsd-h]

Encrypting keys with a passphrase would also help.

[jacquesm]

Yes, but once an attacker has root on your systems they may well install something that captures that passphrase so a chunk of hardware that you have with you would seem to offer some extra protection.