Comment by neuwirth

I think a better way would be to use something like secret-tool on a fully local setup. I'd still be wary of granting fully autonomous access to the system even with that setup (it would be better to have some set of passwords that are "in scope" for certain actions,where all others require a manual check and override).