Describe the feature or problem you’d like to solve

Support encrypted keychains for Linux, Mac, and Windows.

Proposed solution

Instead of storing the CLI application's OAuth token in plaintext, integrate with keychain applications so it stays encrypted.

Additional context

aws-vault uses its own library for interacting with the various keychain applications.

aws-okta also implements the same library to store credentials for both Okta sessions and AWS role sessions.