First time, prompt the user for credentiale, then save those in the appex keychain. I think appex can access keychain, just not the main app keychain