genericsize our Function-al interfaces
use an unify function iterface generics + start hiding private/package state in x509store
allow sharing of our custom `java.security.X509CRL.verify` logic (with BC not installed)
avoid `X509CRL.verify` call and use our helper built to do that (without BC installed)
+ some minor cleanup - only SecurityException should be catched for `System.getenv`