Why doesn’t High Sierra record the opening of keychains in the log, in the way that Sierra does? Has Apple abandoned the goals of its new unified log?
accountsd
How to identify which keychains are opened when your Mac starts up, and any problems when that happens.
A detailed examination of what happens during the first few minutes after starting your Mac up. Vital for anyone trying to diagnose problems in that period.
The Eclectic Light Company 