Please correct me if I'm wrong, but doesn't PoS require the miners to keep their private keys online on the machine doing block validation?
A workaround would be for each output to have 2 keys, a spending key and a POS key.
This would allow users to upload their POS key(s) to a mining pool without that pool being able to spend their money.