A desktop "secrets" API

plan9 has had something similar.
secstore - which holds your secrets as a text file and is unlocked by a single password, and
factotum - which serves secrets if necessary, or keeps them hidden if challange/respose auth is
used. If this is of interest more details here http://plan9.bell-labs.com/sys/doc/auth.pdf

-Steve