GnuPG agent forwarding is the coolest thing I didn't realise I knew I wanted (until I tried to sign a commit in a VM) https://wiki.gnupg.org/AgentForwarding
Follow
I was thinking about messing with USB passthrough (for GPG smartcard), too, so I'm lucky I looked for this first.
