add trusted key store

Above you inline the paths in the range, here you split the declaration out - pick one please :-)