Actually this is still better than Chrome does. If you run that, you are prompted for access to it. If you click "Allow" the next time the command is called, you will be prompted again.

If you "Allow" when Chrome prompts for access to a keychain item it then creates a new keychain item and gives itself "always allow" access.