I’ve had occasion to work with Apple’s Keychain security APIs a couple times now (once while developing Cocoalicious, and now for a few iPhone projects I’m working on), and, in terms of complexity of use relative to simplicity of the task at hand, I think it has to be about the worst API I’ve ever encountered. I’m sure it’s infinitely flexible and capable of doing all kinds of crazy stuff that my