Off device encryption key storage

Option to need an additional device to access the decryption key with. This additional device could then deny access after x number failed attempts. The key would not be stored at rest on the device requesting access. Idea is to harden security in situations where a device is more likely to be taken