add READ_EXTERNAL_STORAGE permission

This is required to import certificates starting with API level 19 (KitKat 4.4)