Keychain: Ask password before autofill
Not sure how to require password for keychain but here's how I handle sharing my computer:

My admin account is password protected and I have a "Guest" account setup that anyone can access without my intervention (just choose the account). It sets up a clean/empty environment every time. None of your data will be there and anything they create will not be stored.