- Use keystore "mode" if "private key path" or "certificate path" is not
specified