remove hardcoded paths in gen_cert.

This is a step towards platform agnostic config.

Specifically, self.defaultTrustStoreFN and self.keytoolCommand.  Also reformat to:

flag,
flag, arg,

syntax with single quotes.