I want to maximize security but minimize complexity. Let's say I have large enough sums of BTC that need to be secured into three buckets:
- KYC Personal BTC
- Non KYC Personal BTC (mined)
- KYC Company BTC (maybe uses Lightening/BTC as a merchant for business purposes)
I don't want these commingled for privacy, security, but also accounting and taxation purposes. The goal is to have a 2 of 3 multi sig for each category with a hardware signer for two of the private keys with one hot wallet as the third private key. For Example:
Is it possible for each hardware device to have three distinct (seeds) private keys one for each BTC category? In the scenario above I have two hardware devices to manage and nine private keys that need to be physically secured.
If not then my only option us to have a different hardware signer for each private key for each multisig, for example:
In this case, I still have the same amount of private keys to manage (nine) but now I also have six hardware devices to manage. Seems to be getting out of hand.