the only way it makes sense to me is to have an external token for the key. either something yubikey style for überlong password or keyfile on usb stick.