every time a binary tries to access the keychain, you should get a popup asking if you'd like to allow it once or forever