SecKeychainCreate

SecKeychainCreate
 Security::KeychainCore::KeychainImpl::create()
  Security::KeychainCore::KeychainImpl::create(Security::ResourceControlContext const*)
   Security::CssmClient::DbImpl::create()
    CSSM_DL_DbCreate
     cssm_DbCreate(long, char const*, cssm_net_address const*, cssm_dbinfo const*, unsigned int, cssm_resource_control_context const*, void const*, long*)
      SSDLSession::DbCreate(char const*, cssm_net_address const*, cssm_dbinfo const&, unsigned int, cssm_resource_control_context const*, void const*, long&)
       SSDatabaseImpl::create(Security::DLDbIdentifier const&)
        SSDatabaseImpl::commonCreate(Security::DLDbIdentifier const&, bool&)
         Security::CssmClient::DbImpl::create()
          CSSM_DL_DbCreate
           cssm_DbCreate(long, char const*, cssm_net_address const*, cssm_dbinfo const*, unsigned int, cssm_resource_control_context const*, void const*, long*)
            Security::DatabaseSession::DbCreate(char const*, cssm_net_address const*, cssm_dbinfo const&, unsigned int, cssm_resource_control_context const*, void const*, long&)
             Security::DatabaseManager::dbCreate(Security::DatabaseSession&, Security::DbName const&, cssm_dbinfo const&, unsigned int, cssm_resource_control_context const*, void const*)
              Security::Database::_dbCreate(Security::DatabaseSession&, cssm_dbinfo const&, unsigned int, cssm_resource_control_context const*, void const*)
               Security::AppleDatabase::dbCreate(Security::DbContext&, cssm_dbinfo const&, cssm_acl_entry_input const*)
                Security::DbModifier::createDatabase(cssm_dbinfo const&, cssm_acl_entry_input const*, unsigned short)
*                Security::AtomicFile::create(unsigned short)
                  Security::AtomicTempFile::AtomicTempFile(Security::AtomicFile&, Security::RefPointer<Security::AtomicLockedFile> const&, unsigned short)
                   Security::AtomicTempFile::create(unsigned short)
                    _amkrtemp
                     mktemp
                      lstat$INODE64
                    __open
                  fstat$INODE64
                  __open
                  stat$INODE64
                  close
        Security::CssmClient::DbImpl::passThrough(unsigned int, void const*, void**)
         CSSM_DL_PassThrough
          cssm_PassThrough(cssm_dl_db_handle, unsigned int, void const*, void**)
           Security::DbModifier::commit()
            Security::AtomicTempFile::commit()
             lstat$INODE64
             __open
             fstat$INODE64
             Security::RefPointer<Security::AtomicLockedFile>::setPointer(Security::AtomicLockedFile*)
*             Security::RefPointer<Security::AtomicLockedFile>::release_internal()
               close
             Security::AtomicTempFile::close()
              close
             close

^ Calls responsible for creating the invisible file