Fixed #53 : the default JDK provider is used for loading PKCS12
credentials, BC is used only for trust anchors.