I need to be able to sign transactions from wallets on cold storage computers.

Currently, I can see that I can import the keys into a hot wallet and spend them.

But...

Is there a way I can sign a transaction, sending the coins, without the private keys ever leaving the cold storage computers?