On Linux, credentials are saved by default in `~/.duck/credentials`. Add warning and documentation about `--nokeychain` option.