Suggestion: It would be better to support all kSecAttrAccessible values

[AlvaroBro]

For example, you may want to store a secret but prevent it to be carried to another device via encrypted backup. This would be a reasonable thing to want for example if you are encrypting you database with a passphrase stored in the KeyChain, and you want that database to be readable only in the device where it was created. Regards!

[reidmain]

Makes complete sense to me. I really just wanted to steer people away from using the "Always" option but it does feel like I should support everything EXCEPT for "Always".