use app root to get keystore so paths can be relative