Create separate TrustStore from KeystoreManager