security: In MemoryIdentityStorage doc comment, clarify optional parameter getCertificate.