keymgr: Keystores should be able to store certificates

Keystores should be able to store certificates too, not just keys. When we add support for certs we should also rename the Keystore trait to SecretStore or something