I'm making a DIY hardware wallet with arduino. I'm trying to understand how to implement the BIP38 passphrase. As I understand it, it's best practice to not store this on the hardware device. In this case, how can the user sign a transaction without having to put in this additional passphrase each time? Thanks.