Anyone know about /private/var/keybags/backup_keys_cache.db
After examining syslog in my iPad, I found 2 rows that contain the word key

Feb 28 22:25:21 AbiFathirs-iPad backupd[50473] &lt;Warning&gt;: INFO: Refreshed cache in 4.852 s

Feb 28 22:25:21 AbiFathirs-iPad backupd[50473] &lt;Warning&gt;: INFO: Exporting keychain


I check backupd executable in the process list and found it here:

# ps A|grep backupd
50803   ??  Ss     0:00.43 /System/Library/PrivateFrameworks/MobileBackup.framework/backupd


After examining the executable file content using strings in my ubuntu laptop, I found out that this might be an iCloud backup application.

So I try to disable iCloud in control panel, and new the file /private/var/keybags/backup_keys_cache.db no longer appear.

I don't know why the cache file could get to 4GB size last week. But at least now I knew which application that cause it.