add trusted key store

Looks like this import path only works on go1.4