Ensure that a keystore intended for a keymanager has private keys