A first version of keychain wrapper is available in oauth2:
https://github.com/aerogear/aerogear-ios-oauth2/blob/master/AeroGearOAuth2/TrustedPersistantOAuth2Session.swift#L35

Make it more configurable to choose ACL type: WhenUnlock or WhenPasscodeSet etc...