HADOOP-10429. KeyStores should have methods to generate the materials themselves, KeyShell should use them. (tucu)