This looks interesting. For agent-fecfile I used the system keyring + an out-of-process proxy (MCP Server) to try to maximize portability.¹
¹ https://github.com/hodgesmr/agent-fecfile?tab=readme-ov-file...