Store the secrets on a Yubikey. They are unstealable then.

Yubico has their own GUI app or you can wrappers for their CLI tool to use something like dmenu, rofi or Fuzzel to pick one.