Also on this line you say "override the Java global keystore".  It might be worth rephrasing that a bit to highlight the fact that we're only overriding it *for this particular process*, and not permanently or system-wide.  Because Java + SSL can be such a pain in the ass, a lot of people might instinctively interpret the current wording as implying that they need to muck with the system-wide default keystore, because they've heard that in other places before.  That might scare them off. (Always scares me off!)