com.apple.security.app-sandbox com.apple.security.files.user-selected.read-only keychain-access-groups $(AppIdentifierPrefix)de.ilyashallak.readeck2