You can create a watch only signing device by giving your kids only xpub (or multiple if it's a multi sig) Just use those as recovery when you import the keys and you are done