Java systems are often very flexible. There are so many ways to put
things together! There's not just one way to manage your Root CA
certificates, for example; no one keystore may have all the info you
need, or it may not; it may require a password, and should in some
cases, but doesn't have to. It's nuts!

I wish I knew a way to cope well with the complexity of such
flexible, configurable systems.