exposed keystore configuration