First step towards #11 -- supporting PKCS12 keystore.