I was half-way thinking we'd just add this path into the KeystoreConfig map.  Not 100% sure if I like that better than the way you have it here, though...