Following Google's best practices for developing secure apps, the password database is saved in the app data folder, which should be accessible only to the app itself.
this defines a hierarchical relationship between domains where the bounded domain cannot have more permissions than its bounding domain (the parent).