I'm already testing it. And loving it.
This update simplifies my overall setup while GREATLY increasing my security.
I use 2 Kruxes. One does BIP85. The other is my wallet.
Load the 24 word child seed via BIP85 on one Krux. Scan it with the other. Reboot the first Krux & load the 12 word passphrase via BIP85. Scan it with the other.
Load, scan.
Load, scan.
Done.
This allows me to use my wallet stateless without ever needing to get my wallet's seed or passphrase out of the safes where they're locked up. My parent seed (which is encrypted) generates the child seeds to build my wallet. This takes just a few seconds.
"One Seed to rule them all, One Key to find them, One Path to bring them all, And in cryptography bind them."
-- github:
bip-0085.mediawikiIn terms of security:
If my Krux devices get stolen... there's nothing on 'em. If my parent seed gets found or stolen... it's encrypted, but it wouldn't matter anyway since it's backed up on metal and it's never been used as a wallet.