Include root cert in java keystore - fix for broken customer app
tempfile templates now contain the process id in order to avoid (rare)
race conditions