You could use Strongbox with the handoff
variation designed for just that very
scenario.