What do you recommend as best security practice for an individual hodler (who may want to pass bitcoin down to dependents) to maintain self custody while also avoiding catastrophic risk (like someone getting access to your private keys and draining your entire stack)