macOS keychain should allow biometric authentication

The underlying library we use for the keychain does not support using biometric authentication to allow fetching secrets.

An attempt was made to support this in this PR https://github.com/keybase/go-keychain/pull/107, but it was unfortunately never merged. We could cherry-pick from here and perhaps get this into our fork at https://github.com/Benehiko/go-keychain