security: In identity storage, make getDefaultCertificateNameForIdentity and getDefaultCertificateNameForKey throw an exception if the default is not set.