> - Add a trusted CA: will prompt for credentials IIRC this isn't protected by the actual keychain file, and can be done by simply editing the file manually.

> - Add a trusted CA: will prompt for credentials IIRC this isn't protected by the actual keychain file, and can be done by simply editing the file manually. Regardless, peer commentator already noted that password prompts are hardly an issue here. > - Configure proxy settings: prompt for admin credentials Actually, it doesn't. Additionally, browsers have per-user local configuration.