build: disable osxkeychain TPM backend by default

Change-Id: I3e121a7cee0451d20f83aa73742077bc621652be
diff --git a/.jenkins.d/10-build.sh b/.jenkins.d/10-build.sh
index 5c35e81..5132317 100755
--- a/.jenkins.d/10-build.sh
+++ b/.jenkins.d/10-build.sh
@@ -4,8 +4,8 @@
 if [[ -z $DISABLE_ASAN ]]; then
     ASAN="--with-sanitizer=address"
 fi
-if [[ $ID == macos && ${VERSION_ID%%.*} -ge 12 && -z $GITHUB_ACTIONS ]]; then
-    KEYCHAIN="--without-osx-keychain"
+if [[ -n $GITHUB_ACTIONS && $ID == macos && ${VERSION_ID%%.*} -le 12 ]]; then
+    KEYCHAIN="--with-osx-keychain"
 fi
 
 set -x
@@ -28,7 +28,7 @@
 
 if [[ $JOB_NAME == *"code-coverage" ]]; then
     # Build for coverage testing: enable instrumentation and unit tests only
-    ./waf --color=yes configure --debug --with-coverage --with-unit-tests --without-tools $KEYCHAIN
+    ./waf --color=yes configure --debug --with-coverage --with-unit-tests --without-tools
     ./waf --color=yes build
 else
     # Build shared library in debug mode with tests