On Macs, there is a 'keychain' where certificates and passwords are stored encrypted, and there are OS-level controls on access -- either an OS prompt for a password, or biometric authentication.