Would it make sense to also suggest the possibility of re-using the existing jks that is created by the puppetdb package installation and/or the `puppetdb-ssl-setup` script?