Why isn’t being signed enough for an application to store secrets only it can access in the keychain?