well I think I will just have to lump it for now. I've set up my passwords dmg to mount at login and stay mounted, and symlinked from ~/.ssh/id_dsa to the disk image, which will make those keys secure when I am logged out. (and I just realized, will also secure them on my backups)

I'm still looking for a better idea if anyone has one.

I work for the Department of Redundancy Department