Some apps ask me for Keychain access when installing them, configuring them, and/or using them. As with anything related to computer access, permissions and security, giving the app access could be a great convenience to me or a security hole. Unfortunately, I don't know enough about the process to give informed consent. I don't want to grant an application more permission/access than it absolutely needs.
Assuming that I'm installing software that is not overtly suspicious, how can I evaluate whether or not I should grant an application's request to access Keychain?