More work on priviledge separation for host/authentication keyring.