The WebKit project has an Unlock Keychain phase for WebContent, but it's needed in other targets too. In fact, the build currently fails unless one already has the keychain unlocked, or unlocks it manually during build.
Created attachment 344849 [details] proposed fix
Committed http://trac.webkit.org/r233770
<rdar://problem/42125831>