A desktop "secrets" API

There already is a kernel key storage. However, I don't agree that it's always the best thing to do -- things like smartcards don't really have or need kernel drivers. And I wouldn't think a secrets API implementation needs to be part of a desktop either.