app: improved check for OSX `security` command