[security-dev] keystores and IDM API