title: How is python-keyring implemented on Windows?
body: <p>How does python-keyring provide security on Windows?</p>
  
  <p>In GNOME/KDE on Linux, the user is prompted to enter his password to authorize access to the keyring on a per-application basis.</p>
  
  <p>In Windows there is no such prompt when an application accesses the keyring. What is stopping a random python application to retrieve a password from the keyring by running </p>
  
  <pre><code>import keyring
  get_password(service, username)
  </code></pre>
  
  <p>How is user consent implemented? Is the whole concept, atleast in Windows, based on the assumption that all installed programs are 'trusted'?</p>