Ensure that a keystore intended for a keymanager has private keys
Add a check for null/empty password in PKCS12 keystore.