the truststore is needed too

I missed that the truststore and keystore are distinct depenency chains.