[WFLY-3978] - PicketLink EAP 6.4 Issues

https://bugzilla.redhat.com/show_bug.cgi?id=1158387
Since there can be only one keystore, and it does not contain a name in the xml, I think hardcoding this as keystore=keystore is valid. Rather there is a problem with the query used in the BX, this is nothing particular to this use-case, rather something which we do in other places