add support for a variable "java_keystore"

you can use this variable to manage alternative Java keystores, such as an in-house JRE package or application-specific keystore files. (we use both at `$work`)