Right, so you can sync both nodes, and create a different key for each one. That way, when you want to switch to the backup node, you just have to run the update_witness command with the public key of the backup node.

Make sure you use a different key for each node that is running the witness plugin or you will run into problems.