setPassphraseIfAbsent

Stores passphrase under key unless a passphrase is stored there already, and returns the stored one.

On Apple, this is atomic across the processes sharing the Keychain items, e.g. an app and its extensions: of several storing a new passphrase for the same key, all get the one stored first. Elsewhere, it reads and then stores.