Comment 7 for bug 1576308

note that there are a few apps that actually store passwords in gsettings (rhythmbox (for LAN sharing), shotwell (upload passwords for piwigo service), evolution (proxy password).

couldn't we have a very simple global filter on the interface side of things as interim solution ?
the snap knows what key it wants to get/set, the interface handler should just block any other call to gsettings not using this key.