we already set the

osquery_build.keychain

as the default, so I think it should be fine without the

--keychain

option too