pub fn set(service: &str, account: &str, secret: &str)
Write a credential. Silently no-ops on I/O failure so plugin callers match the prior keyring-backed best-effort semantics.