I may be misremembering, but I thought this was the method used by at least one other app. 1password comes to mind but I can't check it right now.

I ran into this when checking unexpected files on a client's system.