Probably make it so that only notarised apps can read the whole keychain, unless presented with a system dialog that states very clearly what is happening.