Or create a separate keychain db and use that. The encryption is only done for the login keychain.