> a "super-secure" password for if something happens that can only be used once

That does not imply a pin or password for easy fallback. That implies something harder, that os self-destructive on use.