SecItemCopyMatching / SecItemAdd return fresh objects to their callers. The WebProcessProxy wrappers leak those objects.
Created attachment 106100 [details] Patch
Fixed in r94398.