Keystore of IdP v3

[Cantor, Scott]

> Those to me look like Key passwords.  Each key in a keystore can have a
> password and the keystore itself can have a password.  Which one of
> backchannel pkcs12/cookie encryption password is taken as the keystore's
> password?

There is no earthly reason to have separate passwords for the keystore and the entries and we just set both to one password. The cookie encryption key *is* that key.

-- Scott