this is why I don't keep it locally, I upload to aws s3, where I have MFA :D I know it all circles back to one master password, but you cannot have more than this, would be overkill