don't build keystore in assembly, do it as a separate step