Fix/empty target bug rm

No, really this time.

This pull request shores up the java_ks keystore provider on Suse hosts. See commits for details. Basically, IBM Java keytool is broken in a few ways that we had to work around.