add trusted key store

I'm not sure the added complexity will be worth it based on the nature of a rocket run; one and done. Maybe this is something we should measure? I'm more worried about "locking" the keystore since multiple rocket processes can make changes to the key store in parallel.