i can check; i think we recently added the ability to supply configuration via just CLI/env when a keychain isn't present, but i don't know that we have a flag to say "ignore the keychain"