Use HD wallets like Electrum so that no private keys are necessary for operation

[androng]

In BIP32, HD wallets, you have several addresses, all spendable from one private key. Further, you can generate these addresses without the private key using a "master public key". So in the future, invoices should be generated on the server with only a "master public key". This should be integrated for maximum security and ease of use.