I am apparently going to need a Linux 'secret(s) provider' (something that handles org.freedesktop.secrets). Gnome-keyring is not what I want, in fact I would like a 'secret provider' that stores secrets in memory only and throws them away almost immediately. Most options are heavyweight, but there's pass-secrets¹ which uses pass², except that pass wants to use gpg and this is my face. Life is too short to wrestle with the greased gpg pig.
¹ https://github.com/nullobsi/pass-secrets
² https://www.passwordstore.org/