This sounds super interesting. I’m not too familiar with go or gRPC but would love to understand the mechanics of this off disk unlock or remote signing. 

AFK right now but I’ll have a look later and might send a few questions.