How about a "warm wallet" that allows you to only send transactions to your hot wallet on demand, but not to anywhere else?