security (doc): In OSXPrivateKeyStorage::getKey, comment that the return value can be null, and that the caller must use CFRelease.