use a keystore instead of a single key for s3auth