Nostrich supports four different signing methods, but remote signing is the most secure option because your nsec never has to touch the client.