Note that now upstream links user keyring to service session keyring thus exposing the exact key leak issue discussed here ... https://github.com/systemd/systemd/commit/437a85112e02042b62751395b9e7225628c1b708 and proposed https://github.com/systemd/systemd/pull/6286