Some keystore providers (BC) throw an IllegalStateException when invoking load(null) to initialize an empty keystore. We should use load(null, null) everywhere instead.