datasource: trim the database configuration. ocsp: update the certstore periodly