Fix keystore path; allow giving keypass

Environment variables are not substituted in value strings, but
environment variables can be accessed. Giving the keypass allows using
a keypass different from the storepass.