Fix private.ks initialization, the password here is for the private *key* not for the private *keystore*.
This is what was causing "java.security.UnrecoverableKeyException: Cannot recover key"
Add toString() w/file + type for clarity
Passwords in api should generally be treated as char[].
Update FileKeystoreInstance ctor to take char[] and a map for alias -> passwords.