Also, Dominik responded to claims made in a (unfounded) post here: https://news.ycombinator.com/item?id=9727297 with a quick blurb: http://keepass.info/help/kb/sec_issues.html

I think KeePass with the key file option (not readable by user accounts, run KP as admin) is the best solution on Windows I've found.

More details here:

http://keepass.info/help/kb/db_headerauth_upg.html