https://github.com/wa/pkg-keychain