I have a separate (removable) VM for paying bills.
I do almost no customization to my environment, as I never know what machine I'll be on.
I move my car keys to the left pocket before I log in with a hard token, so I remember to log out and get the token.