So many of the keychain APIs are "deprecated" (read: marked as "we will nuke this API whenever we want") and have been for a decade or more, but have no replacement either.

A lot of the Security Framework came from Classic, hell, the idea of a keychain came from Classic! Just a mess.