This is such an underrated ops detail. Treat recovery like a runbook: keys in one place, procedure in another, and rehearse once with a small UTXO. Bitcoin is unforgiving, but you can make your process boring.