Ask HN: How do you separate your personal things on a company machine?

Even if it isn't strictly prohibited to use it for other purposes, I try to stick to that rule that company machine is for company work. But it's also nice to have access to my personal mailbox, password manager, rss reader, personal machines, etc. on my company laptop.

For now, I have an encrypted disk volume (so everything is in one place and it's easy to remove from the machine) and a separate browser profile with an SSH tunnel as SOCKS proxy, but maybe using one of my personal machines via some remote desktop solution would be the cleanest solution to this.

I guess it could also depend on how severely restricted and monitored said company machine is.