title: How should the keychain option be used for altool?
body: <p>I'm trying to use the <code>@keychain</code> option with the <code>-p</code> switch in altool in order to load my iTunes Connect password from the keychain:</p>
  
  <pre class="lang-none prettyprint-override"><code>altool --validate-app -f "${IPA}" -u "redacted" -p "@keychain:?????"
  </code></pre>
  
  <p>I'm trying to figure out what I need to enter after <code>@keychain:</code>. Everything I try (path of the keychain file, name of the keychain entry, username in the keychain entry) produces the following error:</p>
  
  <blockquote>
    <p>*** Error: The specified item could not be found in the keychain.</p>
  </blockquote>
  
  <p><code>altool</code> supplies the following info about the <code>-p</code> param:</p>
  
  <pre class="lang-none prettyprint-override"><code>-p, --password  Password. Required if username specified.  Password is read from stdin if one is not supplied.
                  May use @keychain: or @env: prefixes followed by the keychain or environment variable lookup name.
                  e.g. -p @env:SECRET which would use the value in the SECRET environment variable.
  </code></pre>