SSL: use default SSLContext if no truststore provided
SSL: add oxf.http.ssl.keystore.type