custom identity and truststore