#11 single responsibility principle applied: getKeyStore() moved to SSLKeyStore