A Bitwarden or Vaultwarden vault behind a leasegate gate: a pure-Java client that keeps the vault key in the tray, and releases one item or one folder at a time, per process and for a limited time, after a human has seen who is asking.