But wouldn’t you have a problem then if you have a user that always
shuts down their mac. Then you will have a problem the next time the
password needs to be changed, not in the keychain, but with whatever IdP
you are using, that password won’t be up...