store keys in reverse order

certificates inserted first at startup but used last at login