You'll notice
macOS Keychain files are now always protected by the sandbox.
On macOS, the sandbox's list of always-protected paths now also includes ~/Library/Keychains, alongside the existing SSH, GPG, and AWS backup directories.