Standalone private key for a separate account that has write-only access to the backup area and little else?
In this case the key would act more like an access token for a specific operation that you're trying to perform, rather than as a key to a generally usable account.
In this case the key would act more like an access token for a specific operation that you're trying to perform, rather than as a key to a generally usable account.